Dandely privacy notice
Version dandely-privacy-2026-11-06-v1. Effective November 6, 2026.
Who handles your information
Dandely is operated by Kagi LLC. For privacy questions or requests, contact support@dandely.com.
Information we handle
| Information | Why we use it |
|---|---|
| Account email, authentication and session records, and access permissions | Sign you in, protect access and associate purchases with the buyer |
| Food-business concept, supplied locations, financial estimates, alternatives and property statements | Prepare the requested comparison and maintain your worksheet |
| Visits, optional personal decision and report versions | Preserve the information you choose to record and generate the requested reports |
| Location coordinates, dated public-source observations and provenance | Check service-area eligibility and present permitted source context |
| Purchase, consent, tax, payment and refund references and status | Record the accepted offer, provide access, reconcile payments and handle refunds |
| Support messages and privacy-request records | Respond to requests and record their handling |
| Network, security, error and limited usage and performance information | Operate the site, prevent abuse and diagnose failures |
You enter payment details through Stripe's checkout. Dandely keeps payment references and status rather than full card numbers. Stripe may collect billing information needed to process the purchase and calculate applicable tax.
Do not submit passwords, sign-in codes, full payment-card information or sensitive information unrelated to the service. The product is intended for people evaluating a food business, not for children's use.
Browser storage and preview requests
Your browser can save an unfinished worksheet on your device for seven days after you last change it. Reopening it does not extend that period. When you return after it expires, Dandely discards it. If you do not return, the stored information may remain on your device until you clear your browser's site data. You can also clear your saved worksheet in the application.
Temporary checkout information is kept in browser session storage. Authentication uses browser cookies. Clearing this storage may sign you out or remove your unsaved draft.
When you request a preview or readiness check, relevant inputs are sent to Dandely, and addresses or coordinates may be sent to the location and source services used for that check. A supplied listing link is stored as a reference. Dandely does not open it to retrieve the listing.
Service providers
We use service providers for the functions below. Optional diagnostics, measurement and source queries process information only when the corresponding service is enabled and used.
| Provider or category | Function and information involved |
|---|---|
| Supabase | Account authentication, private database records and report file storage |
| Vercel | Website hosting, request handling, firewall protection and, when enabled, usage and performance measurement |
| Trigger.dev | Background processing, including reading the complete report to generate its PDF, plus task identifiers, status and operational run records |
| Sentry, when enabled | Error and performance diagnostics, with controls to remove private worksheet content |
| Resend | Sign-in and service emails, recipient information and delivery records |
| Stripe | Checkout, tax calculation, payment and refund processing, and related financial records |
| Google Maps Platform / Places, when Google nearby context is enabled and queried | Receives the food-business concept used as search text, location coordinates and search settings to return matching listings |
| Google Workspace | Support email and related correspondence |
| OpenAI and Grok connected support tools | Access to support messages and related metadata under granted permissions, to help search, summarize and draft correspondence or send authorized responses |
| U.S. Census Bureau and FEMA, when queried | Census address lookup receives the supplied address. FEMA flood-map queries receive location coordinates |
We limit the information included in analytics and use controls to remove private worksheet content from error reports. Hosting and security providers may still process network information, such as an IP address, to handle requests and prevent abuse. Source services do not need your financial assumptions or personal decision to answer a location query.
Background processing reads the report while generating its files. We minimize retained task inputs and results to operational identifiers, completion indicators and status information. These records can remain associated with a purchase, account or project. Diagnostic records follow separate provider controls and retention schedules.
Google nearby searches are sent from Dandely’s server. We do not include your account email, financial estimates or personal decision in the Google search request. Any personal information you put in the concept text is included in that search text, so avoid adding unnecessary personal details. Google receives the query, coordinates and technical request information, including the server’s network address. Google may use and retain this information to provide and improve its products under the Google Privacy Policy.
Dandely retains the dated count, search text, limitations and attribution with the report under its project retention schedule. Individual listing identifiers, listing coordinates and raw Google responses are processed temporarily to calculate the count and are not stored in the report. Deleting your Dandely worksheet does not itself delete Google’s separate request records.
Other Census statistics and approved boundary data are downloaded for use by Dandely. Checking a location against those downloaded datasets does not send your worksheet to their publishers.
Our core account, database and report-file storage is hosted in the United States. Providers may process operational logs, support information and other service data in other countries. A provider's hosting region does not mean all of its processing stays in that region.
Dandely's worksheet calculations do not use AI. Service providers may use AI for security, spam detection or diagnostics under their own terms. We apply controls to exclude private worksheet content from automated service emails and diagnostic records.
The providers' rules for connected support information differ. OpenAI's Google-app training restrictions have exceptions for information manually copied into a conversation, included in a response or submitted as feedback. Grok's policy excludes Google-app content obtained through its Google account connection from model training. These rules do not establish how long conversations or other provider records are retained.
Use and disclosure limits
We use your project information to provide, secure, support and correct the service and meet applicable obligations. We do not sell your worksheet inputs or use them for targeted advertising or another customer's benchmark.
Your worksheet is private to the buyer account, with access by authorized personnel and providers as needed to operate and support the service. A business purchaser can designate one individual to use that account, as described in the terms of service. We may disclose information when required by law. If information must be preserved for a legal obligation or incident investigation, we limit it to what is needed for that purpose.
Retention and deletion
| Record | Retention schedule |
|---|---|
| Local browser draft | Seven-day validity after changes. Discarded when read after expiry or cleared by you |
| Worksheet updates | Available for 90 days after your first valid report is published |
| Project content and report files | Scheduled for deletion at day 120 after first valid publication, or earlier through an applicable deletion request |
| Refunded project | Closed after a full service refund. After success, deletion is scheduled for 30 days after the recorded refund request. If that timestamp is unavailable, we use the project's last recorded update time |
| Limited purchase and payment records | Retained under our accounting schedule for seven years after project content is removed from the purchase record, then scheduled for deletion |
| Ordinary support correspondence | Scheduled for deletion 120 days after the request is resolved. Separately required billing or legal records follow their own purpose and schedule |
The refunded-project schedule does not start when your bank posts the returned funds. Limited payment records are kept separately from the worksheet for accounting and payment reconciliation. We do not keep project content, addresses, assumptions or decision text merely to preserve an accounting reference.
When you request project deletion, we restrict access, prevent further report updates and queue its private records and files for removal. Removal can take time to complete, including retries if a storage service is unavailable. Deleting an account includes cleanup of its owned projects. We retain a limited record of the deletion to prevent deleted information from becoming accessible if a backup is restored. We cannot remove PDFs you have already downloaded.
Provider logs, emails, backups, support correspondence and payment-provider records follow separate retention schedules. Deleting your worksheet does not immediately remove all of those records. We review records associated with a privacy request, seek provider assistance where needed and explain retained records and their purpose. Contact support@dandely.com for information about your account.
Our email delivery provider, Resend, ordinarily retains message content and delivery logs for 30 days and keeps backups for seven days. These delivery records are separate from correspondence in our support mailbox. After support mail is deleted, Google's recovery and backup processes may retain copies for longer.
Connected AI support tools can retain conversations containing messages, summaries or draft replies under their settings and retention rules. OpenAI may retain saved memories when that feature is enabled; disconnecting its Google app does not automatically delete existing chats or memories. We review relevant connected-tool records when handling a privacy request and seek provider deletion assistance where needed.
Trigger.dev run records can remain during our agreement with that provider, even after detailed logs expire. Its provider-assisted deletion process provides for deletion on request or within 90 days after termination of the agreement. It does not offer self-service deletion of selected runs. Worksheet deletion does not itself erase these records.
Diagnostic records and provider backups also have separate deletion cycles. Stripe may retain transaction information for its own legal, security and financial obligations. Public source services may keep their own access logs, which Dandely cannot erase through worksheet deletion.
Your requests
You can edit supported worksheet inputs and request account or project deletion through the product. You may also contact support@dandely.com to request access, correction or deletion, or report a privacy concern.
We verify identity before disclosing or changing private information. Do not email a password or sign-in code. We will explain any information we must retain and the reason. If you disagree with our response, reply to the same contact and ask us to review it.
Your rights under applicable privacy law remain unaffected by this notice.
Notice changes
Updates to this notice identify their effective date and version. The version accepted for a purchase remains available at its version link. A change to this notice does not by itself authorize new uses of information you previously provided.