LEGAL

Privacy Policy

DashSquad is software you install and run on your own computer. This policy explains what stays on your machine, what leaves it, and the small number of things we ever see.

Last updated: 29 August 2026

1. The short version

  • Your data stays on your machine. Agent configurations, conversations, session transcripts, files and API keys are stored locally under ~/.dash. We have no access to them.
  • No analytics, no trackers, no cookies. Neither this website nor the desktop app ships analytics, advertising, session recording or crash reporting.
  • You choose who your agents talk to. Prompts go directly from your computer to the AI provider whose API key you configured. We are not in the middle.
  • We never sell your data and we do not use your conversations to train models.
  • Two optional features involve servers other than your own — remote access (section 6) and automatic updates (section 7). Both are described below.

2. Who we are

DashSquad (“DashSquad”, “we”, “us”) publishes the DashSquad desktop application and operates the website at dashsquad.ai. We are the data controller for the limited personal data described in this policy. You can reach us at hello@dashsquad.ai.

3. This website

dashsquad.ai is a static site. It sets no cookies, includes no analytics or advertising scripts, and does not fingerprint or profile visitors. Web fonts are bundled at build time and served from our own domain, so loading a page does not call third-party font servers.

Our hosting provider processes standard server request logs — IP address, user agent, requested URL, timestamp — to deliver the site and protect it against abuse. We do not use those logs to build profiles of visitors.

The site links out to GitHub for downloads and source code. Once you follow such a link, the destination's own privacy policy applies.

4. The desktop app: what stays on your computer

You do not need an account to install or use DashSquad locally. Everything the app creates is written to your own disk, by default under ~/.dash:

  • Agent definitions, model choices, tool permissions and other configuration.
  • Conversation history and session transcripts, stored as append-only files so you can audit exactly what an agent did.
  • Per-agent workspaces and any files your agents read or write there.
  • Provider API keys and other credentials, encrypted at rest with AES-256-GCM. The encryption key is held in your operating system keychain.
  • Application and gateway logs.

None of this is uploaded to us. We cannot read it, and we have no mechanism to request it.

5. Services you connect

DashSquad is useful because it talks to services you choose. Those connections are made directly from your computer, using your own accounts and keys.

AI model providers

When an agent runs, your prompts, the relevant conversation context, tool results and any files you attach are sent to the provider you configured — for example Anthropic, OpenAI, Google or OpenRouter. That provider's terms and privacy policy govern what happens to the data, including whether it is retained or used for training. We recommend reviewing those policies before connecting a provider.

Messaging platforms

If you connect a channel such as WhatsApp, Telegram or Slack, messages between you and your agents pass through that platform and are subject to its privacy policy.

Connectors, tools and plugins

Agents can be granted tools — running commands, reading and writing files, browsing the web, or reaching systems through connectors. Those tools act with the permissions you grant them and connect directly to the systems you point them at. Grant access deliberately, and only to systems you are authorised to use.

6. Optional remote access

DashSquad offers an optional feature that lets you reach your agents from another device when you are away from the computer they run on. It is off unless you turn it on.

If you enable it:

  • You sign in through our identity provider, which gives us your email address and an account identifier so we know which devices belong to you.
  • Traffic is forwarded between your device and your own machine over an encrypted connection. The relay is a pipe: we do not store the contents of your conversations.
  • We process connection metadata — timestamps, device and gateway identifiers, IP addresses and byte counts — to route connections, enforce limits and investigate abuse.

If you never enable remote access, you never create an account with us and we hold no personal data about you at all.

7. Automatic updates

Installed builds of the desktop app check for new releases on GitHub so you can stay up to date. That request tells GitHub your IP address and the app version you are running; it is handled under GitHub's privacy policy. We do not receive those requests, and no usage data is attached to them. You can block the check at your firewall if you prefer to update manually.

8. What we never do

  • We do not ship analytics, telemetry or crash reporting in the app.
  • We do not sell, rent or share your personal information for advertising.
  • We do not use your conversations, files or agent output to train models.
  • We do not read the contents of relayed traffic.

10. How long data is kept

  • Local data is kept until you delete it. Removing the ~/.dash directory and uninstalling the app removes your agents, conversations and stored credentials from your machine.
  • Remote access account data is kept while your account is active and deleted within 30 days of you closing it.
  • Server and relay logs are kept for a short period — normally no more than 30 days — for security and troubleshooting, then deleted.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete, export or restrict the processing of your personal data, and to complain to a supervisory authority. For data on your own machine you already have direct control — the files are yours to read, export or delete. For account or relay data held by us, email hello@dashsquad.ai and we will respond within the period required by applicable law.

We do not sell or share personal information as those terms are defined under California law, and we do not process sensitive personal information for inferring characteristics.

12. International transfers

Our service providers may process the limited data described above in countries other than your own. Where such transfers involve personal data protected by the EU or UK GDPR, we rely on appropriate safeguards such as standard contractual clauses.

13. Security

Credentials are encrypted at rest and protected by your operating system keychain, agents run with restricted permissions, and relayed connections are encrypted in transit. DashSquad is alpha software, however, and no system is perfectly secure — please keep your machine and your provider keys protected, and review what you grant your agents access to.

If you believe you have found a security vulnerability, please report it privately to hello@dashsquad.ai rather than opening a public issue.

14. Children

DashSquad is not directed to children and is not intended for use by anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

15. Changes to this policy

We may update this policy as the product develops. The date at the top of the page always reflects the current version, and we will highlight material changes on the website or in release notes. Continuing to use DashSquad after a change means you accept the updated policy.

16. Contact us

Questions about this policy, or about privacy in DashSquad generally, go to hello@dashsquad.ai.