Privacy Policy
We use account, store, product and technical information to run and protect RecallDash, handle billing and answer requests. No sales, advertising use or AI training with your data. Section 7 explains deletion and retained records.
- Square access is read-only: we see your catalog, not your customers, orders or payments.
- No selling, no ads and no AI training on your data.
- Close your account by email and we delete your data within 90 days, with limited exceptions.
Effective October 2, 2026 · Retention updated 2026-11-06
Only FDA food and drug recalls are refreshed today; USDA FSIS, CPSC and NHTSA are paused. FDA food and drug refreshes start January 1, 2026.
Valiz Labs LLC
Support and privacy: support@recalldash.app
1. Who we are
Valiz Labs LLC operates RecallDash and is responsible for the information described here. This policy covers visitors, business customers, users and alert recipients. We process business-submitted catalogs and notes on that business's behalf.
2. What we collect
Account/contact: name, email and sign-in details through Clerk; store contact name, alert email and optional phone from Settings. The optional phone number is not used today. We never request your Square password.
Stores/products: business name, location states, names, variations, categories, SKUs and barcodes from Square, uploads or manual entry. We keep imported fields, not original files. Read-only Square access excludes customers, orders, payments and inventory counts.
Activity: matches, decisions, notes, alerts and account-action history.
Billing: plan and subscription status; Clerk/Stripe handle card details, which we do not see.
Support: messages, feedback and reply email.
Technical: IP address, browser, device and session information needed to run and protect the website.
3. How we use it
We use information for sign-in, imports, recall checks, findings, alerts and records; to keep RecallDash secure and working; and for fraud prevention, billing, support, privacy requests and legal obligations.
We do not sell or rent personal information, use it for advertising or share it for cross-context behavioral advertising. Your information and Square data, anonymized or not, never train or otherwise enhance AI systems. Phone numbers and messaging consent data are never sold, shared or provided to third parties or affiliates for marketing or promotion.
5. Alert emails
Alerts from RecallDash <alerts@recalldash.app> go to each store's alert email, which may start as your verified sign-in email; review or change it in Settings. Email can be delayed, filtered into spam or missed. Service emails are not marketing and have no separate unsubscribe or pause control: changing a store's alert email redirects its alerts, and an accepted removal request stops that store's monitoring and alerts. Delivered emails remain in recipients' mailboxes.
7. How long we keep it
During use: alerts are deleted three years after they are sent, and warnings three years after they end; the deletion runs daily. Open findings, review decisions, warnings you confirmed or dismissed, disconnection notices we sent and any alert whose delivery we have not finished recording remain while the store is in RecallDash.
Remove a store in Settings: monitoring and alerts stop once accepted. Completed removal deletes all its data, including products, findings, alerts, settings, Square tokens and entire audit history, from our active database. Export first; records cannot be viewed or exported afterward. Your account, subscription and other stores, including their audit history, remain.
Square-linked removal requires confirmation that Square authorization is revoked or already absent and may disconnect every location under that merchant; it never changes Square products. File-only stores need no revocation. A failed connection keeps its data until removal or a deletion request. Direct Square revocation deletes store content but can retain audit history.
Close your account: email support@recalldash.app from your account email. We stop monitoring and delete account and store information within 90 days, with the exceptions below. Deleting only your sign-in profile leaves stores and alert emails active until you remove them or we close the account.
Account-level billing/security records remain only as needed for security, fraud prevention, disputes, legal, tax or accounting obligations: at most one year after account closure or last-store removal, unless law requires otherwise. This never preserves an explicitly removed store's audit history.
A removal receipt shows the outcome and prevents repeat requests for up to seven days after completed removal; deletion follows within 24 hours. It contains no store name, products or audit content. Unfinished deletion requests remain due. Support messages stay in our support inbox; we keep no separate feedback/contact records. Backups and provider copies expire on their separate schedules.
8. Your choices and rights
Update account details in Manage account and store details in Settings. Export records before removing a store.
Email support@recalldash.app to access, correct, delete or copy personal information, or raise concerns. We verify identity and authority as needed, including for authorized agents, and respond within legal deadlines. Refusals include reasons; reply with "Privacy appeal" to appeal. Applicable law may also allow objections, processing restrictions or regulator complaints. No retaliation for exercising rights.
9. Security and location
We use access controls and encryption; no service is perfectly secure. We notify you of personal-information breaches as legally required. Protect your login and report suspected unauthorized access.
RecallDash and its database are hosted in the US; providers may process information in other countries.
10. Children and changes
RecallDash serves businesses, not children. We do not knowingly collect personal information from children under 13; contact us about suspected collection.
Changes to our practices appear here with a new effective date. We notify you of material changes by email or in the service before they apply. We do not materially change how we use previously collected information without your consent.