This Privacy Policy explains what data we collect when you use PowerDash, why we collect it, who we share it with, and what rights you have over it.
PowerDash is operated by Fast Hippo Media LLC, a Texas limited liability company (“PowerDash”, “we”, “us”). The PowerDash platform is a software-as-a-service product for independent golf cart dealers, covering their website, inventory, sales, rentals, and customer relationships.
1. Who this applies to
This policy covers:
- Dealers who sign up for and operate a PowerDash storefront.
- Members of a dealer's team invited to a workspace.
- Visitors to our marketing site at powerdash.io.
- Dealer team members who use the PowerDash for Facebook Marketplace Chrome extension (see section 3).
Customers of an individual dealer (the people buying or renting golf carts from a dealership running on PowerDash) interact directly with that dealer. The dealer is the “controller” of that data under their own privacy policy. PowerDash is a “processor” acting on their instructions. See our Data Processing Agreement for more on that relationship.
2. What we collect
Account information
Your name, email, password (hashed), the business name of your dealership, your phone number, and your billing address. You can edit any of this in your account settings.
Dealer business data
Inventory, pricing, leads, customer contacts, rental bookings, blog posts, media, and any other content you create inside PowerDash. This data belongs to you; we hold it on your behalf.
Usage data
Standard request metadata: IP address, browser, the pages you visit, and the actions you take. We use this to keep the Service running, detect abuse, and improve the product.
Cookies
We set a small number of first-party cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies. We do not sell or share data with ad networks.
3. PowerDash for Facebook Marketplace (Chrome extension)
PowerDash offers an optional Chrome extension, “PowerDash for Facebook Marketplace”, that helps a dealer's team post their own inventory to Facebook Marketplace from their own Facebook account. This section explains what the extension does with data. The rest of this policy applies to it too.
What it does
When a team member picks a cart in the extension, it opens Facebook Marketplace's create-listing page and fills in the form with that cart's details and photos from PowerDash. The team member reviews the listing and clicks Publish on Facebook themselves. The extension never publishes, edits, or deletes anything on Facebook on its own.
Data stored in your browser
- A connection token, created when you connect the extension using a one-time code from your PowerDash admin. Our servers keep only a scrambled (hashed) copy of it.
- Your dealership's name and your name, so the extension can show who is connected.
- While you are posting, temporary details of the listing being filled in. These are kept in Chrome's session storage and cleared when the browser closes.
Data sent to PowerDash
- The one-time code, to link the extension to your account.
- A listing's status (posted, updated, sold, or removed) and the link to its Facebook listing, when you confirm it in the extension.
- Leads you choose to add from the extension: the name, phone number, email, and message you type in. They are saved to your dealership's PowerDash account like any other lead.
What it reads on Facebook
The extension runs only on Facebook Marketplace pages (facebook.com/marketplace). There it looks at the listing form so it can fill in the right fields, and it reads the page address to pick up your listing's link when you ask it to. It does not read your Facebook messages, friends, profile, or feed. It does not access your Facebook password or sign-in, does not track your browsing on other websites, and does not run on any site other than Facebook Marketplace and PowerDash.
Sharing and limited use
Data from the extension is used only to provide this feature. We do not sell it, use it for advertising, or use it to determine creditworthiness or for lending. It is handled only by the subprocessors listed in section 5. Listings you publish on Facebook are shared with Facebook under Facebook's own terms and privacy policy.
PowerDash's use of information received through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Disconnecting and removing it
Click Disconnect in the extension, or remove the browser under Facebook Marketplace in your PowerDash admin. Either one cancels the connection token immediately. Uninstalling the extension deletes everything it stored in your browser.
4. Why we collect it
- To provide and maintain the Service.
- To bill you for your subscription.
- To communicate with you about the Service (sign-in links, billing notices, security alerts).
- To provide support when you ask for it.
- To diagnose bugs and improve the product.
- To comply with our legal obligations.
We do not use your data to train AI models, sell it to third parties, or share it with advertisers.
5. Who we share it with
We use a small number of subprocessors to help us run the Service. Each is contractually obligated to handle your data securely:
| Subprocessor | What they do | Region |
|---|---|---|
| DigitalOcean, LLC | Application hosting, managed database, object storage | United States |
| Resend, Inc. | Transactional email (sign-in links, billing notices) | United States |
| Stripe, Inc. | Payment processing | United States |
| Google LLC (Workspace) | Our internal team email | United States |
We do not share your data with any other third party for marketing purposes. If we add or change subprocessors we will update this list before the change takes effect.
6. How long we keep it
We keep your data while your account is active. If you cancel, we keep your data for 90 days so you can come back, then we permanently delete it. You can export your full dataset at any time before that 90-day window closes.
We keep billing records for 7 years to comply with U.S. tax law. Server logs are kept for 30 days for security and debugging.
7. Your rights
You have the right to:
- Access the data we hold about you.
- Correct any data that is wrong.
- Delete your account and have your data erased (subject to the billing-records retention above).
- Export your data in a machine-readable format (CSV or JSON).
- Object to or restrict certain processing.
If you live in the European Economic Area, the United Kingdom, or California, you also have rights under the GDPR or CCPA respectively, including the right to lodge a complaint with your local data-protection authority. We will not retaliate if you exercise any of these rights.
To exercise any right, email privacy@fasthippomedia.com. We will respond within 30 days.
8. Security
- Encryption in transit (TLS 1.2 or higher).
- Encryption at rest (AES-256).
- Role-based access controls and least-privilege internal access.
- Audit logging on all production data access.
- Regular security reviews.
- Two-factor authentication available on every account.
If we ever experience a personal-data breach affecting your account we will notify you within 72 hours of discovery, as required under the GDPR.
9. International transfers
PowerDash and its subprocessors are based in the United States. If you access the Service from outside the U.S., your data will be transferred to and stored in the U.S. Where required we rely on Standard Contractual Clauses or equivalent transfer mechanisms.
10. Children
PowerDash is a B2B product for business operators. We do not knowingly collect data from anyone under 16. If you believe we have collected data from a minor, email privacy@fasthippomedia.com and we will delete it.
11. Changes to this policy
We will update this page if we materially change how we handle your data. We will email account holders before any material change takes effect.
12. Contact
Privacy questions: privacy@fasthippomedia.com
General contact: hello@powerdash.io
Mailing address: Fast Hippo Media LLC, Austin, TX, USA
