BashKPI
Client Login
BashKPI
Client Login
This Privacy Policy describes how Bash Enterprises LLC, DBA BashKPI ("BashKPI," "we," "us") collects, uses, and protects information in connection with the BashKPI platform (the "Service").
The Service is a business-to-business product. Users of the Service are employees of client organizations ("Client") that have subscribed to BashKPI. All users are adults. This policy does not apply to consumers, and BashKPI does not offer the Service directly to individuals.
a. Account and login information: name, email address, and role, provided by the Client or received from the Client's Microsoft 365 sign-in at login (see Section 3).
b. Business operational data: point-of-sale transaction data from Toast and accounting/general ledger data from Sage, pulled through connections the Client authorizes and configures.
c. Reporting and location data: business location assignments and reporting structure configured by the Client's administrators.
We do not collect device information, browser fingerprints, or any form of behavioral or analytics tracking on individual users.
Clients may sign in to BashKPI using their organization's Microsoft 365 account. This integration is used solely to verify a user's identity at login. When a user signs in, BashKPI receives the user's name, email address, and Microsoft account identifier from Microsoft. BashKPI does not access, request, or store the Client's files, email, calendar, Teams, SharePoint, or any other Microsoft 365 content.
Information is used to operate the Service for the Client: authenticating users, generating KPI reports and dashboards, providing customer support, maintaining the security and integrity of the Service, and complying with legal obligations. We may also use information in aggregated or de-identified form to maintain and improve the Service; this form of use does not identify any individual or Client. We do not sell information, and we do not use it for advertising.
The Service is hosted on Microsoft Azure. Azure is our infrastructure provider and does not use Client data for any purpose other than providing hosting services to us. Toast and Sage are the Client's own connected services, authorized directly by the Client; BashKPI accesses only the data those connections are configured to provide.
Data is retained for the duration of the Client's active contract and for up to three (3) years following termination, after which we work to remove it in accordance with our internal retention practices. Exact deletion timing may vary based on technical and operational factors. Clients may request earlier deletion of their data by contacting info@bashkpi.com, subject to any records we are required or entitled to retain for legal, accounting, security, or dispute-resolution purposes.
We use industry-standard security controls, including encryption and access controls, to protect data on the Service. No system is completely secure, and we cannot guarantee absolute security.
This policy currently applies to users located in the United States. BashKPI does not currently offer the Service to individuals located in California or outside the United States. If this changes, this policy will be updated to reflect any additional obligations that apply.
We may update this policy from time to time. Material changes will be communicated to Clients.
Questions about this policy or requests regarding your data can be directed to info@bashkpi.com. Enterprise Clients may also be subject to a separate Data Processing Agreement.