Legal
Privacy Policy
Not yet published
This policy has not been written or reviewed. Entry Dash must not launch with this page in its current state.
This page exists so the route, layout and footer links are in place. The content below is a checklist of what the finished policy has to cover, based on what the application actually collects — not a policy.
What must be covered
- Account data — email address, and the names and birth dates recorded on rider profiles, including those of minors.
- Tax data — W-9 status and TaxBandits recipient tokens held against an owner profile. Entry Dash does not store SSNs, SINs or W-9 PDFs; it stores tokens and status only.
- Payment data — handled by Stripe. Card details do not reach Entry Dash servers.
- IP addresses and user agents — recorded against owner-authority consent events as corroborating evidence, retained for seven years to match IRS and CRA record-retention windows (ADR 19).
- Third parties — Stripe, TaxBandits, Resend and Cloudflare Turnstile.
- Rights and contact — access, correction and deletion, and who to contact. US and Canadian requirements differ; both audiences are in scope.