Privacy Policy
We use account, store, product and technical information to run and protect RecallDash, handle billing and answer requests. No sales, advertising use or AI training with your data. Section 7 explains deletion and retained records.
- Square access is read-only: we see your catalog, not your customers, orders or payments.
- No selling, no ads and no AI training on your data.
- Close your account by email and we delete your data within 90 days, with limited exceptions.
Effective September 22, 2026 · Wording revised 2026-09-24
This wording-only revision does not change your rights or obligations or require renewed agreement.
Valiz Labs LLC · 2108 N St Ste N, Sacramento, CA 95816, USA
Support and privacy: support@recalldash.app
1. Who we are
Valiz Labs LLC operates RecallDash and is responsible for the information described here. It covers visitors, business customers, their users and alert recipients. We process business-submitted catalog content and notes on that business's behalf.
2. What we collect
Account/contact: name, email and sign-in details through Clerk; store contact name, alert email and optional phone from Settings. The optional phone number is not used today. We never request your Square password.
Stores/products: business name, location states, product names, variations, categories, SKUs and barcodes from Square, uploads or manual entry. Square access is read-only, excluding customers, orders, payments and inventory counts. We retain imported product fields, not original upload files.
Activity: matches, review decisions and notes, alerts and account-action history.
Billing: plan and subscription status. Clerk and Stripe handle payments; we do not see card details.
Support: your messages, feedback and reply email.
Technical: IP address, browser, device and session information needed to run and protect the website.
3. How we use it
We use information for sign-in, imports, recall checks, findings, alerts and records; to keep RecallDash secure and working; and for fraud prevention, billing, support, privacy requests and legal obligations.
We do not sell or rent personal information, use it for advertising, or share it for cross-context behavioral advertising. We do not use your information, or any data received from Square, anonymized or not, to train or otherwise enhance AI systems. We do not sell, share or provide phone numbers or messaging consent data to third parties or affiliates for marketing or promotional purposes.
5. Alert emails
Alerts from RecallDash <alerts@recalldash.app> go to each store's alert email, which may start as your verified sign-in email; review or change it in Settings. Email can be delayed, filtered into spam or missed. Service emails are not marketing and have no separate unsubscribe or pause control: changing a store's alert email redirects its alerts, and removing or disconnecting the store stops them. Delivered emails remain in recipients' mailboxes.
7. How long we keep it
During use: detailed scan results are deleted after one year and most alert records after three years. Review decisions, open findings and latest results remain while the store is in RecallDash.
Removing or disconnecting a store in Settings or revoking Square access deletes its catalog, uploads, findings, alerts, settings and Square tokens. If a connection simply stops working, the store's data stays until you remove the store or ask us to delete it.
To close your account, email support@recalldash.app from your account email. We stop monitoring and delete your account and store information within 90 days, subject to the exceptions below. Deleting only your sign-in profile does not close your RecallDash account: your stores keep being checked and alert emails keep coming until you remove them or email us.
We retain a history of account actions (including review notes and account, store and product identifiers), billing and security records only as long as needed for security, fraud prevention, resolving disputes, and legal, tax or accounting obligations; no longer than one year after your account closes or your last store is removed, unless the law requires otherwise.
Duplicate-prevention records contain no email address or message text and have no automatic age limit. Account feedback records are deleted during account closure; public contact records are not tied to an account. Support emails themselves stay in our support inbox. Deleted data may remain temporarily in backups and in our providers' systems until expiry.
8. Your choices and rights
Update account details in Manage account and store details in Settings. Export records before removing a store.
Email support@recalldash.app to access, correct, delete or copy personal information, or raise concerns. We may verify identity and authority, including authorized agents, and respond within legal deadlines. If refused, we explain why; appeal by replying with "Privacy appeal" as the subject. Applicable law may give additional rights to object, restrict processing or complain to a regulator. We do not retaliate for exercising rights.
9. Security and location
We use access controls and encryption to protect information, but no service is perfectly secure. We notify you of personal-information breaches as legally required. Protect your login and report suspected unauthorized access.
RecallDash and its database are hosted in the US; providers may process information in other countries.
10. Children and changes
RecallDash serves businesses, not children. We do not knowingly collect personal information from children under 13. Contact us about suspected collection.
Changes to our practices appear here with a new effective date. We notify you of material changes by email or in the service before they apply. We do not materially change how we use previously collected information without your consent.