Privacy Policy
Your data, explained clearly.
1. Who is responsible?
Rami Ghassani, operating as Dialboard (“Dialboard,” “we,” “us”), is responsible for the personal information described here, subject to the role we play under applicable law. Privacy requests: info@mydialboard.com.
2. Information we collect
- Account and identity information: name, email address, account verification state, authentication identifiers, signup verification or password-recovery messages processed by the authentication provider, and basic account preferences. Password authentication is provided by our authentication service; Dialboard does not need to store your plaintext password.
- Workspace information: workspace name, time zone, scheduling interval, custom labels, colors, availability windows, team members, and workspace configuration.
- Appointment and lead information: names, client email addresses, client contact phone numbers, spouse/participant details, appointment times, appointment outcomes, notes, and any other information a user chooses to enter. Manager phone numbers may also be stored as contact information for phone appointments. Customers should not enter data they are not authorized to provide.
- Usage and activity information: recent workspace access events, user actions such as appointment or schedule changes, timestamps, and security or diagnostic logs used to operate and protect the Service.
- Subscription information: plan, subscription state, customer/subscription/transaction identifiers, payment confirmation, and billing history. When enabled, payment-card information is entered into and handled by the payment provider displayed at checkout; full card numbers are not collected in Dialboard's signup forms or stored in the Dialboard database.
- Communications: information in support requests, service emails, client appointment confirmations, and manager reminder messages. When a workspace member books an appointment, Dialboard may email the client the appointment time and assigned manager information. Zoom appointments may include the manager's Zoom link; non-Zoom appointments may include the manager phone number saved in Dialboard. Managers can choose email reminders, while saved manager phone numbers can be included as contact information for phone appointments.
- Optional Calendly links: A team member may save an independent Calendly event booking link. All new appointments are first recorded in Dialboard. If a caller chooses to also use Calendly, they open that manager's separate Calendly booking page. Dialboard does not automatically transfer, import, or synchronize booking information with Calendly. The caller enters any necessary information in Calendly separately, under Calendly's own terms and privacy practices. For such appointments, Dialboard skips its own confirmation emails and scheduled manager reminders to avoid duplicates.
3. How we use information
We use information to create and secure accounts; operate the schedule, availability, booking confirmations, outcomes, and reports; display data to authorized workspace users; process and verify subscriptions; respond to requests; diagnose problems; detect misuse; maintain backups; meet legal and accounting obligations; and protect Dialboard, customers, and the public. We may use aggregated or de-identified statistics to understand and improve service performance, provided they are not used to identify you.
4. Customer data and workspace access
Dialboard is designed for business teams. Workspace content may be visible to authorized people who belong to that workspace. The account owner is responsible for deciding what information is entered, determining which people may use the account, and complying with applicable data-protection, consumer, telemarketing, do-not-call, call-recording, and employment rules. Avoid placing highly sensitive information in notes or lead fields unless it is necessary and lawful.
Depending on the facts and applicable law, a business customer may act as the controller/business and Dialboard may act as a processor/service provider for lead or prospect information the customer enters. The customer is responsible for its own notices, lawful basis, consents, opt-outs, retention instructions, and responses to individuals. We process that information to provide and secure the Service, and as otherwise permitted by law or contract.
5. Legal bases
Where a legal basis is required, we rely as applicable on performing our contract with you, legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where we request it. For lead data a customer uploads, the customer is generally responsible for identifying and documenting its legal basis.
6. Service providers and disclosures
We may share the minimum necessary information with providers that host the application and database, authenticate accounts, deliver appointment emails, provide security, and process payments and subscriptions. In the current setup, Hatchable provides application hosting, server functions and database infrastructure; Supabase provides account authentication; the payment provider shown at checkout (FastSpring is planned but pending activation) handles eligible purchases; and Calendly, when independently chosen by a workspace user, handles its own separate booking pages, invitations and reminders under its own policies. These providers process information under their own applicable terms and privacy notices. The providers we use may change as the Service evolves. We may also disclose information when legally required, to protect rights and safety, to investigate fraud or security incidents, or as part of a business transfer subject to appropriate safeguards.
We do not sell personal information for money and do not use workspace lead data to build advertising profiles. We do not disclose lead or prospect details to unrelated third parties for their independent marketing. We may use de-identified or aggregate information for service analytics.
7. International processing
You may use Dialboard from a country different from where we or our service providers store or process information. Information may therefore be processed in Lebanon, the United States, or other countries where relevant providers operate. Where applicable law requires a transfer mechanism or other safeguard, we will take steps appropriate to that law. International processing may mean the receiving country's data-protection rules differ from those in your location.
8. Retention
We retain account, workspace, appointment, activity, and billing information for as long as reasonably necessary to provide the Service, maintain business records, resolve disputes, protect security, and comply with law. Some records may remain in backups or be retained for a limited period after deletion. Retention periods vary with the data type and legal obligations; deletion from backups may take additional time where technically or legally necessary.
9. Security
We use reasonable administrative, technical, and organizational measures intended to protect information, including authenticated access and restricted server-side operations. No website, database, or internet transmission can be guaranteed perfectly secure. Keep account credentials private, limit who can access each workspace, and contact info@mydialboard.com promptly if you believe information has been accessed improperly.
10. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information, withdraw consent where consent is the basis, and complain to a regulator. To make a request, contact info@mydialboard.com and describe the account and request. We may need to verify your identity and may retain information where law allows or requires it. If your information was entered by a business customer, we may refer the request to that customer or assist them in responding.
11. Cookies and local storage
Dialboard uses browser storage and session mechanisms needed to authenticate users, remember the signed-in state, and operate basic site functionality. Service providers may use their own technologies as described in their policies. Dialboard does not currently use workspace lead data for advertising or cross-site behavioral profiling.
12. Children's privacy
Dialboard is a business service for adults and is not intended for children under 18. Do not create an account or enter children's personal information into the Service unless strictly necessary, lawful, and appropriately authorized.
13. Changes to this Policy
We may update this Policy as the Service or applicable law changes. We will update the effective date and provide notice or request renewed acknowledgement where required. The version accepted during registration or checkout may be recorded with the acceptance time.
14. Email verification and payment security
Signup, verification and account recovery emails may be sent through Supabase and its configured mail service. Messages may contain a one-time code or single-use link. We do not ask customers to send full card numbers, card security codes, passwords, or verification codes by email. Card information must be provided only through the secure checkout of the payment provider identified during purchase.
15. Applicable privacy laws and requests
Dialboard is operated from Lebanon, where Law No. 81 of October 10, 2018 addresses electronic transactions and personal data. Other data protection rules may apply depending on your location and circumstances. Contact info@mydialboard.com about access, correction, export, deletion, providers and cross-border processing. We may need to verify your identity and respond subject to applicable law and our obligations to workspace customers.
16. Contact and complaints
Privacy contact: info@mydialboard.com
Operator: Rami Ghassani
If you believe we have mishandled personal information, contact us first. You may also have the right to complain to your applicable data-protection or consumer authority.