Privacy Policy

1. Introduction

DDS Media Marketing LLC ("Company", "we", "us", or "our") operates 360Onboard ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By using 360Onboard, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, password

• Billing Information: Payment details (processed securely by our payment provider)

• Profile Information: Logo, brand colors, custom domain

• Content: Onboarding flows, forms, documents, client data you input

• Communications: Support requests, feedback, emails you send us

2.2 Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent on Service

• Device Information: IP address, browser type, operating system

• Cookies and Similar Technologies: To maintain sessions and analyze usage

2.3 Information from Third Parties

• Authentication Providers: If you use OAuth/SSO to log in

• Payment Processors: Transaction confirmation (we don't store full payment details)

3. How We Use Your Information

We use collected information to:

• Provide the Service: Process onboarding flows, store data, deliver features

• Improve the Service: Analyze usage, fix bugs, develop new features

• Communicate: Send transactional emails, service updates, support responses

• Security: Detect fraud, prevent abuse, ensure platform security

• Compliance: Meet legal obligations and enforce our Terms

We do NOT:

• Sell your personal information to third parties

• Use your data to train AI models without consent

• Share client data with other users

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

• Contract Performance: To provide the Service you purchased

• Legitimate Interests: To improve our Service and prevent fraud

• Legal Compliance: To meet regulatory requirements

• Consent: Where explicitly provided (e.g., marketing emails)

5. Data Sharing and Disclosure

5.1 Service Providers

We share data with trusted third parties who help us operate:

• Hosting: Vercel (infrastructure), Supabase (database)

• Email: Resend (transactional emails)

• Payments: Stripe or similar payment processors

• Analytics: Usage tracking and performance monitoring

These providers are contractually obligated to protect your data.

5.2 Legal Requirements

We may disclose information if required by:

• Law enforcement or government requests

• Court orders or subpoenas

• Protection of our rights or safety of others

• Investigation of fraud or security issues

5.3 Business Transfers

If we are acquired or merge with another company, your data may be transferred as part of that transaction.

5.4 With Your Consent

We may share data in other circumstances with your explicit permission.

6. Data Retention

• Account Data: Retained while your account is active

• Uploaded Files: Automatically deleted after 60 days

• Backups: May be retained for up to 30 days for disaster recovery

• Logs: Retained for up to 90 days for security and debugging

After account deletion, we retain data only as required by law or for legitimate business purposes (e.g., fraud prevention).

7. Your Rights and Choices

7.1 Access and Portability

You can access and export your data anytime through your account dashboard or API.

7.2 Correction

You can update your account information directly in your profile settings.

7.3 Deletion

You can request account deletion by contacting david@360onboard.com. We will delete your data within 30 days, except where retention is legally required.

7.4 Object to Processing

You can object to certain data processing activities by contacting us.

7.5 Marketing Communications

You can unsubscribe from marketing emails using the link in each email.

7.6 Cookies

You can disable cookies in your browser settings, though this may affect Service functionality.

7.7 Do Not Track

We currently do not respond to Do Not Track browser signals.

8. Data Security

We implement industry-standard security measures:

• Encryption: Data encrypted in transit (SSL/TLS) and at rest

• Access Controls: Limited employee access to user data

• Regular Audits: Security assessments and vulnerability testing

• Secure Infrastructure: Enterprise-grade hosting (Vercel, Supabase)

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure adequate protections through:

• Standard Contractual Clauses (SCCs) for EU data

• Privacy Shield or equivalent frameworks where applicable

• Contractual obligations with service providers

10. Children's Privacy

360Onboard is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know: What personal information we collect and how it's used

• Delete: Request deletion of your personal information

• Opt-Out: Opt out of sale of personal information (we don't sell data)

• Non-Discrimination: Not be discriminated against for exercising your rights

To exercise these rights, email david@360onboard.com.

12. European Privacy Rights (GDPR)

If you are in the EEA, you have the right to:

• Access your personal data

• Rectify inaccurate data

• Erase your data ("right to be forgotten")

• Restrict processing

• Data portability

• Object to processing

• Lodge a complaint with your supervisory authority

Contact us at david@360onboard.com to exercise these rights.

13. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for Service functionality (authentication, sessions)

• Analytics Cookies: To understand usage patterns and improve the Service

• Preference Cookies: To remember your settings

You can control cookies through your browser settings.

14. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for their privacy practices. Review their privacy policies before providing any information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email.

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

16. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: david@360onboard.com