Privacy Policy

CashDash (“CashDash,” “we,” “us”) is a receipt-and-bookkeeping web application operated by Blueridge Web Services LLC, a Florida limited liability company (Florida document #L24000126O2), doing business as BrainIT Consulting. We can be reached at support@dreamforgeworld.com.

• Account info: your name, email address, and (if you sign in with Google) your Google profile photo.
• Authentication data: hashed password (if you use email + password), session tokens, IP address, and user agent for active sessions.
• Receipts and documents: images of receipts, checks, invoices, bills, and statements you upload or forward via email. These are stored in our private blob storage.
• Extracted ledger data: vendor names, amounts, dates, categories, and Schedule C line codes derived from your documents by AI vision.
• Audit log: a record of bootstrap, transaction CRUD, identity changes, and billing events, kept for security and support.
• Billing info: Stripe customer and subscription IDs (your full card details never touch our servers — they go directly to Stripe).

• To run the service you signed up for.
• To authenticate you and keep your account secure.
• To process payments for paid tiers.
• To classify your receipts and produce a CPA-ready export at month-end.
• To respond when you contact support.

We use the following services to operate CashDash. Each has its own privacy policy you may wish to review:

• Vercel — application hosting and serverless functions.
• Neon — Postgres database storing your account and ledger data.
• Vercel Blob — private storage for uploaded document images.
• Anthropic (via Vercel AI Gateway) — Claude Vision models that extract structured data from your documents. Document images are sent to Anthropic for inference. Anthropic does not retain the data for training.
• Resend — transactional email (verification, password reset, admin digest).
• Postmark — inbound email parsing for the email-forward feature.
• Stripe — payment processing for Pro and Team subscriptions.
• Google— OAuth sign-in (only if you choose “Continue with Google”).

We keep your account and ledger data for as long as your account is active. If you delete your account, we delete your ledger and account data within 30 days, except for records we are required to keep for tax or fraud-prevention reasons.

You can request a copy of, correction to, or deletion of your data by emailing support@dreamforgeworld.com. We aim to respond within 30 days. If you are in the EU/UK/California you have additional statutory rights (GDPR / CCPA); those apply and we honor them on request.

In line with the Florida Information Protection Act of 2014 (FIPA, Fla. Stat. § 501.171), if we determine that personal information of Florida residents has been accessed or acquired without authorization, we will notify affected individuals as expeditiously as practicable and in no event later than 30 days after determination of the breach, unless a law-enforcement delay applies or a federal-law requirement supersedes.

Although CashDash is below the revenue and data-broker thresholds that trigger the Florida Digital Bill of Rights (Fla. Stat. § 501.701 et seq.), we voluntarily honor the same access, correction, deletion, and opt-out rights for Florida residents who request them.

CashDash uses cookies only to keep you signed in. We do not use third-party analytics or advertising cookies.

We will update the “Last updated” date above when we change this policy. Material changes will be announced via email to the address on your account.