Legal
Privacy Policy
Last updated: May 23, 2026
Summary
Dallio is a business-operations app. inventory, POS, sales team, marketing, books. The data you put in is yours. We use it to run the product on your behalf; we do not sell it, train models on it, or share it with anyone outside Dallio without your explicit permission.
What we collect
- Account info. your name, email, business name, role. Provided by you at signup.
- Business data. items, customers, invoices, POs, suppliers, settings, anything you create inside Dallio.
- Device + usage info. browser / device type, IP, pages visited, feature interactions. Used to keep the product secure + improve performance.
- Payment info. For your Dallio subscription and wallet top-ups we store a billing email and a tokenised reference from the payment provider, never full card numbers. Payments from your customers are handled by the providers you connect (Paystack, Flutterwave, Stripe) and settle to your own account; Dallio records only the amount, status, and a provider reference to reconcile your orders, and never holds the funds.
How we use it
- Run the product features you sign up for.
- Send transactional emails (receipts, invoices, password resets, security alerts).
- Detect + prevent abuse and fraud.
- Aggregate (non-identified) usage statistics so we know which features matter.
We do not sell your data to third parties. We do not use your business data to train any AI / ML model.
Sub-processors
We use a small number of well-known service providers to operate Dallio. Each is bound by a contract that holds them to at least the same level of care described here:
- File and media storage. Backblaze B2
- Network, DNS and the public website. Cloudflare
- Email we send. Resend
- Email we receive. Zoho
- Payments in Nigeria. Paystack, Flutterwave
- Domain registration, when you buy a domain through us. Porkbun, Go54 (WhoGoHost)
- The AI that answers questions and writes drafts. Google (Gemini), Groq, Cohere, Mistral, NVIDIA. Your prompt and the business data it needs go to whichever one answers; none of them trains on it.
- Advertising, and only if you connect an account yourself. Meta, Google, TikTok. They receive what your adverts need — your words, pictures and budget — and the audience details you choose to send.
Dallio runs its own servers and its own database. Nobody else holds your business records.
A current list is at /privacy#sub-processors. We notify you 14 days before adding a new one.
Data Processing Addendum
If your jurisdiction requires a Data Processing Addendum (GDPR, UK-GDPR, CCPA, etc.), we have one ready. Email admin@dallio.app and we'll send the signed copy within a business day.
Your rights
You can, at any time:
- Export every piece of data you've put into Dallio (full CSV export from Settings).
- Delete your account. wipes all data within 30 days, including backups.
- Request a copy of what we know about you.
- Object to a particular processing activity.
Contact
Privacy questions go to admin@dallio.app. Security disclosures go to admin@dallio.app. Anything else, contact us.