Most of the numbers that run a business live in spreadsheets. Turning them into a dashboard people will trust has meant one of two things: days of an analyst's time in a BI tool, or a chart wizard that sums the unit prices and calls it revenue.

dashboardACE does what a careful analyst does, in about a minute. It reads every row, measures every column, tests every possible join between your tables on the actual values, and only then asks the AI what it all means. Then it checks every word of the answer against the data before you see it.

What you get is a model of your data you can reason about - which table is the transactions, which are the lookups, how they link, what each measure means - and a dashboard designed on top of it that you can edit, question, share and present.

The name is the promise: you bring the spreadsheet, it does the work, and you walk into the meeting looking like the dashboard ace - in under a minute, with nothing to learn.

dashboardACE is built and operated by XXT Pty Ltd in Sydney, Australia.

XXT Pty Ltd (ACN [ACN NOT SET]), trading as dashboardACE ("we"), operates dashboardACE.com. This policy explains what we collect, why, and what we do with it. We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

• Your account: your name, email address, password (stored only as a salted PBKDF2 hash), and any company, job title, phone, address and tax number you choose to add for invoicing.
• Your data: the files you upload and the dashboards built from them.
• Payments: Stripe processes card payments and subscriptions, and PayPal processes PayPal payments. We receive the payment reference, the amount, what it was for, and the payer's name, email and billing country (to work out whether GST applies). We never see or store full card numbers or security codes - they go straight to Stripe or PayPal.
• Partners: if you join our partner programme, the payout details you give us (a PayPal email address or bank account) and a record of the referrals and commission on your account.
• Usage: basic records of actions in the product (for example that a dashboard was built or shared), your IP address and browser type, to operate, secure and improve the service.

Your uploaded data

Uploaded files are parsed on our servers and stored in a compressed form in a location the web server cannot serve directly. The original file is not kept. Your data is only ever sent to a browser that your sharing settings allow: you, the people you invite, anyone holding the password or link you created, or the public if you publish a dashboard.

Deleting a dashboard deletes its data when no other dashboard of yours uses it. Deleting your account deletes all of your dashboards and data.

Artificial intelligence

Every AI feature - designing a dashboard, writing insights, charting a question and the Ask AI chat - is provided by dashboardACE AI, which runs on a third-party AI service. To design a dashboard, we send it a description of your data: table and column names, statistics computed on your data (such as counts, ranges and the most common values), up to 50 sample rows per table, and any instructions you type. To write insights we send figures computed from your dashboard. When you use Ask AI we send your messages, the conversation so far, the dashboard's model and the figures your browser computed with the filters you have applied. The provider processes this only to return an answer, under the API terms that apply to our account. We do not send your full dataset.

Information about other people in your data

If the data you upload or connect includes personal information about other people - your customers or staff, for example - you decide what is included and why, and we handle it on your behalf under our data processing agreement.

Who we share it with

Only the service providers needed to run dashboardACE - hosting, email delivery, our AI service provider (for the AI features described above), and Stripe and PayPal (for payments) - and only as far as each needs. We do not sell personal information or uploaded data, and we do not use your data to train AI models.

Cookies

We use a signed session cookie to keep you signed in and a cookie to remember that you unlocked a password-protected dashboard. If you arrive through a partner's referral link, a cookie named ref holds that partner's code for 60 days, so the partner can be credited if you sign up; when you create an account we record which partner referred you. If analytics are enabled on this site, Google Analytics sets its own cookies.

Security

All traffic is encrypted in transit. Passwords are hashed with PBKDF2. Sign-in cookies are signed so they cannot be forged, sharing links are long random tokens, and password attempts are rate limited.

Access, correction and complaints

You can see and correct your details on your profile page, and delete your account at any time. For anything else, or to make a complaint, write to support@dashboardACE.com. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

XXT Pty Ltd · Level 1, 457 Elizabeth Street, Surry Hills NSW 2010 · support@dashboardACE.com

These terms are an agreement between you and XXT Pty Ltd (ACN [ACN NOT SET], ABN [ABN NOT SET]), trading as dashboardACE. By creating an account or using the service you accept them.

1. The service

dashboardACE turns data you upload into interactive dashboards, using automated analysis and artificial intelligence. Dashboards, measures, relationships and insights are generated automatically and may contain errors. You are responsible for checking any figure before relying on it for a decision, a report or advice to others.

2. Your account

Keep your password secure; you are responsible for activity on your account. You must be at least 18, or the age of majority where you live, to hold an account.

3. Your data

You keep all rights to the data you upload and the dashboards you create. You give us permission to store, process and display that data only as needed to provide the service to you and to the people you share it with. You must have the right to upload the data, and it must not contain information you are not permitted to share with us or with the AI service described in the privacy policy. Do not upload payment card numbers, government identifiers or health information. Where your data includes personal information about other people, our data processing agreement forms part of these terms and sets out how we handle it on your behalf.

4. Sharing

When you share a dashboard by link, password or publicly, anyone who can open it can see the data it shows and, if you allow it, download that data. You are responsible for choosing the right sharing setting.

5. Acceptable use

You must not use dashboardACE to publish unlawful, infringing, misleading or harmful material, to attempt to access data that is not yours, to overload or probe the service, or to resell it without our written agreement. Our acceptable use policy sets out in more detail what may not be uploaded or done, and forms part of these terms.

6. Plans and payment

Prices are in US dollars. Prices include GST for customers in Australia; customers outside Australia are not charged Australian GST, but may be responsible for taxes where they are.

Subscriptions. When you pay by card, your plan is a subscription billed through Stripe, monthly or yearly, and it renews automatically at the end of each period until you cancel. We issue a receipt and tax invoice for every payment, including each renewal; you will find them under Invoices. You can cancel at any time in one click from Plan & usage, which opens the Stripe billing portal. When you cancel, your plan does not renew and you keep it until the end of the period you have already paid for. We do not refund unused time, except under the guarantee in section 7 or where the law requires.

Paying once with PayPal. Instead of a subscription you can pay once through PayPal for 30 days or 12 months of a plan. A PayPal purchase does not renew.

When a paid period ends without renewing, your account returns to the Free plan: nothing is deleted, but features and limits beyond the Free plan stop applying - for example, a public dashboard stops being listed.

7. Refunds and our 14-day guarantee

If the service does not work as described, contact us within 14 days of your first payment and we will fix the problem or refund you. Outside this guarantee, payments are not refunded for unused time, except where the law requires. Nothing in these terms excludes, restricts or modifies your rights under the Australian Consumer Law.

8. Free trial

Every new account starts with a 14-day trial of the Pro plan, automatically and without a card. The trial is available once per person; opening further accounts to get another trial is not allowed. When the trial ends your account returns to the Free plan unless you buy a plan. Nothing is deleted, but features and limits beyond the Free plan stop applying.

9. AI credits

Each plan includes a monthly allowance of AI use. AI credits are an optional one-off purchase - 100 credits for US$10 or 500 credits for US$40 - that do not expire and are used only after your plan's monthly allowance has run out. A dashboard build uses 3 credits, a custom AI design 5, and an AI chart, insight refresh, AI picture, AI theme or chat message 1. Credits belong to the account that bought them, cannot be exchanged for cash, and are not refundable once used.

10. Team members

On the Team and Agency plans the account owner can invite people by email. Team includes 5 members and Agency 10; additional members are charged per member, monthly or yearly, as part of the owner's subscription. Each member uses their own account, and has the plan's features while the owner's plan is live. Dashboards shared with the team can be seen by every member, and members with the Editor role can edit them. The owner is responsible for the people they invite, and can remove a member at any time. Each member must accept these terms.

11. Partner programme

If you join our partner programme, the rules on the partners page also apply to you. In short: we pay 25% of what customers you refer pay in their first 12 months; commission becomes payable 30 days after each payment and is reversed if the payment is refunded or charged back; self-referrals, bidding on our brand name, spam and misleading claims are not allowed; and we may close a partner account that breaks the rules.

12. Availability and changes

We work to keep the service available but do not guarantee uninterrupted access. We may change features; if a change materially reduces what a paid plan includes during its period, you may ask for a pro-rata refund.

13. Liability

To the extent permitted by law, our liability for any claim relating to the service is limited to re-supplying the service or refunding what you paid in the 12 months before the claim, and we are not liable for indirect or consequential loss.

14. Ending

You may delete your account at any time. We may suspend accounts that breach these terms. These terms are governed by the laws of New South Wales, Australia.

XXT Pty Ltd · Level 1, 457 Elizabeth Street, Surry Hills NSW 2010 · support@dashboardACE.com

This data processing agreement ("DPA") forms part of the terms of service between you, the customer, and XXT Pty Ltd (ACN [ACN NOT SET], ABN [ABN NOT SET]), trading as dashboardACE ("we"). It applies whenever we handle personal information on your behalf in providing the service, and it takes effect automatically when you accept the terms - no signature is needed. If your organisation needs a signed copy, write to support@dashboardACE.com.

1. Definitions and roles

• Customer data means the files you upload, the data read through the connections you set up, and the dashboards, models, images and exports created from them.
• Personal information has the meaning given in the Privacy Act 1988 (Cth), and includes "personal data" under any other data protection law that applies to your use of the service, such as the GDPR.
• You decide what customer data is processed and why: you are the controller (or the "APP entity" responsible for it). We process customer data only on your behalf: we are your processor.
• For the details of your own account - your name, email, billing details and how you use the service - we act on our own behalf, as described in the privacy policy.

2. What we process, and why

• Subject matter and purpose: storing and processing customer data to provide the service as you set it up - building, displaying, refreshing, sharing and exporting your dashboards, and the AI features you use.
• Nature of the processing: receiving, parsing, storing, profiling (computing statistics about columns), computing dashboards, sending descriptions, statistics and samples to our AI service provider, showing dashboards to the people your sharing settings allow, refreshing from your connections, and deleting.
• Duration: for as long as you have an account, and then until deletion under section 9.
• Types of personal information: whatever you choose to include in customer data - typically names, contact details, and customer, employee or transaction records.
• Individuals concerned: the people whose information is in your data, such as your customers, employees, suppliers and contacts.
• Sensitive information - health records, government identifiers, payment card numbers and the other categories listed in our acceptable use policy - must not be uploaded or connected.

3. Your instructions and responsibilities

You instruct us through the service: by uploading and connecting data, choosing sharing settings, inviting people and team members, using the AI features and deleting data. This DPA and the terms of service are your complete instructions; anything further must be agreed in writing. You are responsible for having a lawful basis for the customer data you give us, for giving individuals any notice and obtaining any consent the law requires, and for choosing sharing settings that suit the data. We will tell you if we believe an instruction breaks a data protection law.

4. Our obligations

• We process customer data only on your instructions, unless the law requires otherwise - in which case we tell you first, unless the law forbids it.
• Everyone we authorise to access customer data is bound by confidentiality and accesses it only as far as needed to run, support or secure the service.
• We do not sell customer data, use it for advertising, or use it to train AI models.
• We help you respond to requests from individuals to access, correct or delete their information. The service lets you edit and delete your data yourself; if you need more, write to us.
• We give you the information you reasonably need for a privacy impact assessment or a consultation with a regulator about your use of the service.

5. Sub-processors

You authorise us to use the following kinds of sub-processor, each only as far as it needs to perform its part of the service:

• Our hosting provider - the servers and storage the service runs on, where customer data is stored.
• Our email delivery provider - sends account, sharing, invitation and billing emails.
• Our AI service provider - runs dashboardACE AI. It receives table and column names, statistics computed on your data, up to 50 sample rows per table, figures computed from your dashboards, and the questions and instructions you type. It never receives your full dataset, and processes what it receives only to return an answer.
• Stripe - card payments and subscriptions.
• PayPal - PayPal payments.

Stripe and PayPal handle payment details only; they do not receive customer data. We require each sub-processor, by contract or by its standard terms, to protect personal information to a standard no lower than this DPA, and we remain responsible to you for their processing. We will update this list before adding or replacing a sub-processor that handles customer data. If you object on reasonable data protection grounds, tell us; if we cannot resolve your objection, you may stop using the service and close your account.

6. Security

We keep technical and organisational measures appropriate to the risk, including:

• All traffic to and from the service is encrypted in transit with TLS.
• Account passwords are stored only as salted PBKDF2 hashes; sign-in and dashboard password attempts are rate limited; sign-in cookies are signed so they cannot be forged.
• Database passwords, tokens and keys for your connections are encrypted with AES-256, with a tamper seal, the moment they are saved, and are never sent back to a browser or to the AI service provider.
• Uploaded data is stored in compressed form outside the web root, where the web server cannot serve it directly. Original uploaded files are not kept.
• Access rules are checked on every request: data and images are sent only to someone the dashboard's sharing settings allow.
• Database connections only ever read: each read runs in a read-only session that is rolled back when it ends, and a query that could change data is refused before it is sent.
• Database queries are parameterised, and data shown on a page is escaped, so it cannot run as code.

We may change these measures as the service develops, but never in a way that lowers the overall protection of customer data.

7. Data breaches

If we become aware of a breach of security that leads to the accidental or unlawful loss of, or unauthorised access to or disclosure of, customer data, we will notify you without undue delay at your account email. We will tell you what we know - what happened, the data and individuals likely to be affected, the likely consequences and what we are doing about it - and keep you updated as we learn more. We will co-operate with you so you can meet your own obligations, including under the Notifiable Data Breaches scheme in the Privacy Act. Notifying you is not an admission of fault.

8. International transfers

We and our sub-processors may store and process customer data in Australia and in other countries, including the United States. Before personal information is disclosed overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles. Where another law requires a recognised transfer mechanism - for example for personal data from the European Economic Area or the United Kingdom - we will rely on one the law accepts, such as standard contractual clauses, and can put them in place with you on request.

9. Deletion and return

You can download your data and export your dashboards while your account is open. Deleting a dashboard deletes its data when no other dashboard of yours uses it. Deleting your account deletes all of your dashboards, data, images and saved connections. Copies that remain in backups are deleted as those backups expire. We keep only what the law requires us to keep, such as invoices, which do not contain customer data.

10. Audits

We will answer your reasonable written security and privacy questionnaires - once a year, and after any breach under section 7 - and give you the information you reasonably need to show that this DPA is being met. Where a data protection law gives you a right to a further audit, it is carried out at your cost, on reasonable notice, during business hours, in a way that does not disrupt the service or expose other customers' data, and under a confidentiality agreement.

11. Liability and precedence

Each party's liability under this DPA is subject to the limits in the terms of service, except where the law does not allow it to be limited. If this DPA and the terms of service conflict on the handling of personal information, this DPA prevails.

12. Governing law

This DPA is governed by the laws of New South Wales, Australia, and the parties submit to the courts of New South Wales.

XXT Pty Ltd · Level 1, 457 Elizabeth Street, Surry Hills NSW 2010 · support@dashboardACE.com · security@dashboardACE.com

This policy is part of the terms of service. It applies to everyone who uses dashboardACE - account holders, team members, partners and anyone viewing a shared dashboard. It exists to keep the service safe, lawful and fast for everyone. If you are not sure whether something is allowed, ask us first at support@dashboardACE.com.

Data you must not upload or connect

• Data you do not have the right to use - for example someone else's confidential information, or data obtained in breach of a law or a contract.
• Personal information about other people, unless you have a lawful basis to use it this way and have given any notice the law requires.
• Payment card numbers, card security codes, or bank account passwords.
• Government identifiers, such as tax file numbers, passport, driver licence or Medicare numbers, or social security numbers.
• Health records, and other sensitive information such as genetic or biometric data, or information about a person's racial or ethnic origin, sexual orientation, religious or political beliefs, or criminal record.
• Passwords, keys or other credentials inside your data. Credentials belong only in the connection fields made for them, where they are encrypted.

Content you must not publish or share

• Anything unlawful, or that infringes someone else's copyright, trade marks or other rights.
• Material that is defamatory, harassing, hateful, sexually explicit or that promotes violence.
• Misleading material - for example a dashboard presented as another organisation's official figures, figures you know to be false presented as fact, or anything designed to collect people's passwords or payment details.

Things you must not do

• Malware: upload viruses or other malicious code, or files crafted to attack or overload the parsers that read them.
• Probing: scan, probe or test the service for vulnerabilities, or try to get around its security, without our written permission. Found a problem? Tell us at security@dashboardACE.com and we will thank you for it.
• Scraping: scrape, crawl or harvest the site, the gallery or shared dashboards by automated means, except for search engines indexing public pages.
• Overloading: send requests at a rate meant to slow the service down, or get around plan limits, rate limits or usage allowances - including by opening extra accounts to get more free usage or more than one free trial.
• Other people's accounts: access an account, dashboard or data that is not yours, or share your sign-in with someone else. Team plans exist so each person can have their own.
• Reselling: resell, sublicense or offer dashboardACE itself as a service to others without our written agreement. Building dashboards for your own clients is fine - that is what the Agency plan is for.
• Copying: copy, reverse engineer or systematically extract the service, its designs or its outputs to build a competing product.
• Abusing the AI features: try to make dashboardACE AI produce unlawful or harmful content, extract its instructions, get around its safeguards, use it for anything other than your dashboards and data, or automate requests to it.
• Misusing connections: use a database connection to reach a network, server or system you are not authorised to access, to scan addresses, or to use our servers as a relay.
• Spam: use sharing invitations, team invitations or referral links to send unsolicited messages.

Reporting misuse

If you see a dashboard or account that breaks this policy, tell us at support@dashboardACE.com, with the link if you have it. Security concerns go to security@dashboardACE.com.

What we may do

If we reasonably believe this policy has been broken we may remove or unpublish content, switch off sharing, suspend or close the account, and report unlawful activity to the authorities. Where we can, we tell you first and give you a chance to put it right; where the risk to others is serious or urgent, we act first and tell you afterwards.

XXT Pty Ltd · Level 1, 457 Elizabeth Street, Surry Hills NSW 2010 · support@dashboardACE.com