FranDash Privacy Policy

Effective date: October 31, 2026

FranDash LLC (“FranDash,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with our websites, hosted franchise management platform, mobile applications, DASH assistants, APIs, Model Context Protocol (“MCP”) connections, support, and related business interactions, collectively the “Services.” It includes the privacy information applicable to FranDash's MCP service and connected applications such as Microsoft 365 Copilot.

Scope and our role

Personal information means information that identifies, relates to, or can reasonably be linked to an individual. “Customer” means an organization using FranDash. “Customer Data” means information submitted to, maintained in, or retrieved from that organization's FranDash account.

For information in Customer accounts that we process on a Customer's behalf, we follow the Customer's instructions and applicable service and data processing agreements. The Customer generally decides why that information is collected and who may access it. For our own website inquiries, business contacts, account administration, billing, security, and business operations, FranDash determines the relevant purposes as described here. Our legal role depends on applicable law and the circumstances.

This Policy does not replace a Customer's own notices or our contractual obligations. It does not govern independent third-party websites or AI services merely because they connect to FranDash. Reading this Policy or visiting our website is not treated as blanket consent to every processing activity; we obtain consent where required.

Information we collect

Business and account information: names, business email addresses, phone numbers, business addresses, employer or organization, job title, user identifiers, account preferences, and authentication information needed for the sign-in method used.

Customer records and communications: contact information and records about franchisees, prospective franchisees, employees, vendors, locations, projects, contracts, training, operations, royalties, invoices, and other business activity that a Customer or authorized source places in the Services. The exact content depends on the Customer's configuration and use.

Inquiries and AI interactions: information you provide through forms, demonstrations, support requests, messages, and DASH conversations, including requests, attachments, responses, and task results. A Customer-operated DASH assistant may collect lead, qualification, and contact information for that Customer.

Transaction information: subscription, invoice, payment-status, and transaction details needed to administer our business or Customer-configured workflows. Payment information should be submitted only through supported payment mechanisms; do not enter card security codes or account credentials in ordinary records, support messages, or AI prompts.

Technical and usage information: IP address, browser and device information, operating system, pages and features accessed, timestamps, session identifiers, approximate location inferred from IP address, and operational, security, and error records. We may receive information from cookies, similar technologies, and enabled integrations as described below. The collection depends on the features used and permissions granted.

Sources of information

We receive information directly from you; from Customers, their administrators, and authorized users; from devices and browsers interacting with the Services; and from authentication providers, integrations, business partners, or other sources authorized by the Customer or permitted by law. We do not require access to the entire contents of an outside account merely because a specific integration is connected.

How we use information

We use information to provide and administer the Services; authenticate users and enforce permissions; carry out authorized requests and workflows; communicate about accounts, support, invoices, and service changes; operate integrations; monitor reliability; investigate errors; prevent fraud, abuse, and unauthorized access; maintain business records; and meet legal and contractual obligations.

We also use relevant business-contact and website information to respond to inquiries, arrange demonstrations, understand use of our Services, and send business updates or marketing where permitted. You can opt out of marketing as described below. Customer Data is handled according to applicable instructions and agreements; it is not a general license to market unrelated products to people in Customer records.

When information is disclosed

To the Customer and its authorized recipients. Records, conversations, reports, and task results may be available to the Customer, its administrators, and other users or recipients permitted by the Customer's configuration and instructions. Information submitted to a Customer's DASH assistant may be delivered to that Customer for follow-up.

To service providers. We use providers for hosting, infrastructure, communications, support, security, analytics, payment processing, and other functions needed to operate our business and the Services. They receive information appropriate to their function and are subject to applicable contractual confidentiality, security, and data protection requirements. FranDash remains responsible for its own obligations relating to providers acting on its behalf.

To connected applications. We disclose relevant information to Customer-selected applications, AI services, and other recipients when authorized or instructed by the Customer or user, within the applicable permissions. See the MCP and AI sections below.

For legal and safety purposes. We may disclose information where reasonably necessary to comply with legal requirements or valid legal process, enforce agreements, investigate fraud or misuse, or protect rights, property, or safety. We provide notice of legal demands where legally permitted and appropriate.

For a business transaction. Relevant information may be disclosed during a proposed or completed merger, financing, reorganization, acquisition, or transfer of business assets, subject to appropriate confidentiality protections and applicable law. We may also disclose information with your consent or at your direction.

FranDash does not sell or rent personal information, or share it for cross-context behavioral advertising. A Customer-directed transmission to its selected AI provider is for the authorized service purpose, not permission for FranDash to sell the information.

MCP connections and AI providers

MCP lets compatible AI assistants and other applications request information or invoke enabled tools through FranDash's APIs. Access is tied to the authenticated account's permissions, available tool scopes, and administrator restrictions. Depending on the tools enabled, a request may search, retrieve, create, update, archive, or delete records, including multiple records.

To fulfill a request, FranDash may receive user and organization identifiers, authentication information, connection metadata, tool-call parameters, relevant Customer records, and results. These may contain personal, financial, operational, or confidential information. We do not necessarily receive the entire conversation held in an outside AI application.

When a Customer enables a connection, it instructs FranDash to return the information reasonably needed for authorized requests to the selected application. That provider may retain returned data in conversation history, logs, exports, or its own systems. Retention, independent use, international processing, security, training, and deletion are governed by the Customer's agreement and settings with that provider and applicable law.

A provider selected independently by Customer is distinct from a provider FranDash engages to operate its own Services. FranDash does not control the former's independent processing and remains responsible for its obligations concerning its own disclosures and subprocessors. Customer should select suitable enterprise settings and review the provider's policies before connecting confidential or personal information.

DASH and model training

DASH may process prompts, conversation content, relevant account records, tool results, and generated responses to answer questions or complete tasks. In a Customer-operated deployment, the Customer controls the authorized business purpose and follow-up process. Providers engaged by FranDash to deliver these functions are subject to the applicable service-provider arrangements.

FranDash will not use Customer Data to train general-purpose AI models, or authorize its subprocessors to do so, without the Customer's express written authorization. Processing required to respond to requests or operate, secure, and support the Services remains subject to the applicable agreements. This commitment does not govern the independent practices of an AI provider the Customer chooses outside FranDash; the Customer must review that provider's agreement and settings.

Cookies analytics and communications

We use cookies and similar technologies for functions such as sign-in, session security, preferences, and service operation. Where enabled, analytics and email technologies may provide information about website use, message delivery, opens, and link interactions. Information from these technologies can be linked to a user or account. We obtain consent for nonessential technologies where required.

You may manage cookies through browser settings and any choices offered in the Services. Blocking essential cookies may affect sign-in or other features. We honor legally required opt-out preference signals, including Global Privacy Control where applicable. Legacy Do Not Track signals are not equivalent to those legally recognized signals; we do not use a paid subscription as a reason to disregard applicable privacy choices.

You may unsubscribe from FranDash marketing through the link in the message or by emailing info@frandash.com. We may still send necessary service, billing, security, and legal notices. Messages sent by a Customer through FranDash are subject to that Customer's instructions and consent obligations; contact the identified sender to manage those communications. Where text messaging is offered, required consent and opt-out mechanisms apply, and consent to marketing messages is not a condition of purchase.

SMS consent and mobile information

When you opt in to text messaging, we or the identified Customer sender collect your mobile number, the program and subjects you selected, the time and method of consent, the disclosures presented, and relevant message and opt-out records. We use this information to operate the selected program, deliver messages, respond to requests, prevent abuse, maintain suppression records, and demonstrate consent.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We do not sell, rent, buy, or transfer text-messaging opt-in data or consent. General disclosure permissions elsewhere in this Policy do not authorize sharing SMS consent or mobile information for third-party marketing, lead generation, or another sender's messaging program.

We may provide information necessary to operate the identified sender's program to messaging providers, aggregators, carriers, and support providers acting for that purpose, subject to appropriate restrictions. We may also provide relevant records where legally required. Those disclosures do not authorize recipients to use the information for their own marketing or to treat consent as transferable. SMS opt-in information is not made available for unrelated marketing or general-purpose AI model training.

Consent applies only to the sender and subjects disclosed when you opted in. For a Customer-branded program, that Customer is the sender and FranDash processes messaging information on its behalf. You can withdraw messaging consent by replying STOP to the sending number; reply HELP for assistance or email info@frandash.com. We may retain limited consent and suppression records to honor your choice and meet legal requirements. Opting out of messages does not require deletion of records necessary to prevent further messaging.

Retention deletion and disconnection

We retain personal information for the period reasonably necessary for the stated purpose, taking account of the information's sensitivity, our relationship with you, Customer instructions, contractual retention terms, applicable law, security needs, and dispute-resolution requirements. Account and billing records, Customer records, conversation data, and operational logs may have different retention periods. We do not retain information indefinitely merely because consent was once given.

Operational and audit records may contain requests, responses, errors, identifiers, and other information needed to administer or secure the Services. Their retention and access are governed by their purpose and applicable agreements. Deletion from active systems, backup expiration, and legal holds may operate on different schedules; information retained for a legal obligation or in backups remains protected and restricted as appropriate.

Revoking an MCP connection stops new access under that authorization once effective; it does not reverse completed actions or erase information already copied to another application. Customer must separately manage copies held by its selected provider and any provider-side deletion request. Customer Data export and deletion also remain subject to the governing agreement.

Security and international processing

FranDash uses reasonable administrative, technical, and physical safeguards appropriate to the information and Services, including access controls and protections for data transmission and storage. No internet transmission or storage method is completely secure. We notify affected Customers or individuals of security incidents as required by applicable law and our agreements.

FranDash uses Microsoft Azure infrastructure for its platform. Information may be processed in the United States and other countries where authorized personnel, service providers, or Customer-selected applications operate. Hosting locations and access arrangements remain subject to the governing customer agreement. Laws in other countries may differ from those in your jurisdiction. Where applicable law requires a transfer mechanism or additional safeguards, we use the required contractual or other lawful arrangements. Contact us for information relevant to your use of the Services.

Your privacy rights and requests

Depending on applicable law and our role, you may have rights to obtain information about processing; access or receive a portable copy of personal information; correct inaccuracies; request deletion; restrict or object to processing; withdraw consent without affecting prior lawful processing; and appeal a denied request where available. Rights may be subject to lawful exceptions and verification. You may also complain to the appropriate privacy regulator.

Email info@frandash.com to submit a request. Describe your relationship with FranDash and the request, but do not send passwords or unnecessary sensitive information. We may verify identity and an authorized agent's authority before disclosure or account changes. We respond within the period required by applicable law and explain an applicable extension or denial. We do not unlawfully discriminate for exercising privacy rights.

If information is held in a Customer account, direct your request to that Customer. We will assist the Customer as required by applicable law and our agreement, and will route or explain requests received directly where appropriate. For information retained independently by a third-party AI provider, submit a request to that provider as well.

Additional regional information

California. To the extent the California Consumer Privacy Act applies to our processing as a business, eligible residents may exercise rights to know, access, correct, delete, and obtain portable information, and applicable rights concerning sale, sharing, sensitive information, and nondiscrimination. Sections 2–5 describe categories, sources, purposes, and recipient categories for the described practices; section 9 describes retention criteria. We do not sell or share personal information for cross-context behavioral advertising. We use sensitive personal information only as necessary to deliver requested services, protect security, and for other legally permitted purposes, not to infer sensitive characteristics for unrelated uses.

California residents may also ask about disclosures for third parties' own direct marketing under applicable California law. We do not disclose personal information for that purpose without the required permission. Send rights or disclosure requests to info@frandash.com. Where we process records only as a service provider for a Customer, the relevant Customer generally handles the request.

European Economic Area United Kingdom and Switzerland. Where their data protection laws apply, the lawful basis for our own processing may be performance of a contract, compliance with a legal obligation, consent, or a legitimate interest such as operating and securing business services, provided the interest is not overridden by your rights. Processing on a Customer's behalf follows the Customer's instructions and applicable agreement. You may object to direct marketing and to processing based on legitimate interests where applicable. Contact us to exercise rights or obtain relevant transfer-safeguard information.

Children third party services and shared areas

The Services are intended for business use and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided information, contact us so we can investigate and take appropriate steps. Customers remain responsible for the lawfulness of information they submit.

External sites and independently selected applications have their own policies. Information you share in an area configured for other users, a Customer organization, or the public can be seen by that audience. Do not assume all FranDash content is public; visibility depends on the feature and permissions. Use care when sharing confidential or personal information.

Changes to this Policy

We may update this Policy to reflect changes to the Services, practices, or law. We will revise the effective date and provide notice of material changes before they take effect where required, through the Services, email, or another appropriate method. We obtain additional consent where required and do not retroactively broaden uses of previously collected personal information merely by posting an updated policy.

Contact

FranDash LLC
Email: info@frandash.com
Website: https://frandash.com/
Please identify your request as a privacy matter. Existing customers may also use their established FranDash support channel.