DDS Media Marketing LLC ("Company", "we", "us", or "our") operates 360Onboard ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.
By using 360Onboard, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, password
- Billing Information: Payment details (processed securely by our payment provider)
- Profile Information: Logo, brand colors, custom domain
- Content: Onboarding flows, forms, documents, client data you input
- Communications: Support requests, feedback, emails you send us
2.2 Information We Collect Automatically
- Usage Data: Pages visited, features used, time spent on Service
- Device Information: IP address, browser type, operating system
- Cookies and Similar Technologies: To maintain sessions and analyze usage
2.3 Information from Third Parties
- Authentication Providers: If you use OAuth/SSO to log in
- Payment Processors: Transaction confirmation (we don't store full payment details)
3. How We Use Your Information
We use collected information to:
- Provide the Service: Process onboarding flows, store data, deliver features
- Improve the Service: Analyze usage, fix bugs, develop new features
- Communicate: Send transactional emails, service updates, support responses
- Security: Detect fraud, prevent abuse, ensure platform security
- Compliance: Meet legal obligations and enforce our Terms
We do NOT:
- Sell your personal information to third parties
- Use your data to train AI models without consent
- Share client data with other users
4. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), we process your data based on:
- Contract Performance: To provide the Service you purchased
- Legitimate Interests: To improve our Service and prevent fraud
- Legal Compliance: To meet regulatory requirements
- Consent: Where explicitly provided (e.g., marketing emails)
5. Data Sharing and Disclosure
5.1 Service Providers
We share data with trusted third parties who help us operate:
- Hosting: Vercel (infrastructure)
- Database & Storage: Supabase (US East)
- Email: EmailIt (transactional emails)
- Payments: Stripe or similar payment processors
- Analytics: Usage tracking and performance monitoring
These providers are contractually obligated to protect your data.
5.2 Legal Requirements
We may disclose information if required by:
- Law enforcement or government requests
- Court orders or subpoenas
- Protection of our rights or safety of others
- Investigation of fraud or security issues
5.3 Business Transfers
If we are acquired or merge with another company, your data may be transferred as part of that transaction.
5.4 With Your Consent
We may share data in other circumstances with your explicit permission.
6. Data Retention
- Account Data: Retained while your account is active
- Uploaded Files: Stored with no hard limits, subject to fair use policy
- After Account Deletion: You have 30 days to export all data. After 30 days, all data is permanently deleted from our servers with no backup retention
- Logs: Retained for up to 90 days for security and debugging
After account deletion, we do not retain data in backups or archives except where required by law.
7. Your Rights and Choices
7.1 Access and Portability
You can access and export your data anytime through your account dashboard or API.
7.2 Correction
You can update your account information directly in your profile settings.
7.3 Deletion
You can request account deletion by contacting david@360onboard.com. We will permanently delete your data within 30 days, except where retention is legally required.
7.4 Object to Processing
You can object to certain data processing activities by contacting us.
7.5 Marketing Communications
You can unsubscribe from marketing emails using the link in each email.
7.6 Cookies
You can disable cookies in your browser settings, though this may affect Service functionality.
7.7 Do Not Track
We currently do not respond to Do Not Track browser signals.
8. Data Security
We implement industry-standard security measures:
- Encryption: Data encrypted in transit (SSL/TLS) and at rest (AES-256)
- Access Controls: Limited access to user data (founder only)
- Regular Audits: Security assessments and vulnerability testing
- Secure Infrastructure: Enterprise-grade hosting (Vercel, Supabase with SOC2 Type II certification)
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
9. International Data Transfers
Your data may be transferred to and processed in the United States. We ensure adequate protections through:
- Standard Contractual Clauses (SCCs) for EU data
- Contractual obligations with service providers
- SOC2 Type II certified infrastructure
For more details, see our Data Processing Agreement.
10. Children's Privacy
360Onboard is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately at david@360onboard.com.
11. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know: What personal information we collect and how it's used
- Delete: Request deletion of your personal information
- Opt-Out: Opt out of sale of personal information (we don't sell data)
- Non-Discrimination: Not be discriminated against for exercising your rights
To exercise these rights, email david@360onboard.com.
12. European Privacy Rights (GDPR)
If you are in the EEA, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Lodge a complaint with your supervisory authority
Contact us at david@360onboard.com to exercise these rights.
13. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential Cookies: Required for Service functionality (authentication, sessions)
- Analytics Cookies: To understand usage patterns and improve the Service
- Preference Cookies: To remember your settings
You can control cookies through your browser settings.
14. Third-Party Links
The Service may contain links to third-party websites or integrate with third-party services (such as Google Drive, Dropbox, Box, and pCloud when those integrations launch). We are not responsible for their privacy practices. Review their privacy policies before providing any information.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email.
Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.
16. Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Email: david@360onboard.com
Company: DDS Media Marketing LLC
Address: 8 The Greene, Suite B, Dover, DE 19901