OffStep LabsDash Personal Assistant

Your information

Privacy policy

Effective October 1, 2026

This policy explains how Dash Personal Assistant, operated by Jason Profitt through OffStep Labs, handles information. Dash is a privately managed assistant for the operator's authorized accounts. This public website provides information about the app; it does not offer public registration.

Information Dash accesses

Access depends on the scopes the account owner grants and the configured tools. Some connected accounts are read-only. Google handles sign-in; Dash does not collect Google passwords. Authorization tokens are stored in private credential files.

How information is used

Dash uses authorized information to prepare plans, identify relevant messages, track replies and commitments, check availability, prepare drafts, carry out approved supported actions, and report outcomes. It also uses operational records to diagnose failures, prevent duplicate actions, and recover interrupted work. Google data is not sold or used for advertising.

AI processing and other services

Selected message content, calendar details, and related task context may be sent to the configured AI provider, currently OpenAI, to interpret requests, summarize information, reason about next steps, and draft responses. AI processing is not confined to the local computer. The provider handles that information under its applicable service terms and account data controls.

Google receives API requests for connected Gmail and Calendar accounts. Approved email content is shared with its recipients; calendar changes may be visible to the calendar's existing authorized viewers and, where applicable, event attendees. Owner notifications may use Apple iMessage. Other task-related information is shared only as needed for the requested feature or an approved action. Information may also be disclosed when required by law or to address security incidents.

The operator can access the assistant's local records to use and maintain the service. Requests for support should avoid including passwords or authorization tokens.

Storage and retention

Connected information and derived assistant records are stored in the operator's privately managed installation, including local caches, conversation history, case records, logs, and backups. Operational credentials are kept separately from public website files. Service providers may retain processed information according to their applicable terms and settings.

There is no single automatic deletion period covering all records and backups. Information is retained as needed for ongoing work, continuity, recovery, and operator-managed maintenance. Disconnecting an account stops future access but does not automatically erase earlier records, derived summaries, or backups.

Your controls and deletion requests

Account owners can withdraw Google access using Google Account connections. They can also ask the operator to disable a connector or delete retained information by emailing jprof7@gmail.com. Deletion requests are reviewed across active records and retained backups; the operator will explain any retention limits. Removing a local copy does not delete the original email or calendar item at Google. Copies already sent to recipients are outside the assistant's control.

This public website

The site is hosted by Amazon Web Services. Hosting infrastructure processes ordinary request information such as IP addresses, request paths, browser information, and timestamps to deliver and protect the site. These pages contain no analytics scripts, advertising trackers, signup forms, or application cookies. Visiting the site does not connect a Google account.

Changes and contact

The date above identifies the current policy. Material changes to connected-data use will be disclosed before new uses or permissions are introduced. For questions or requests, contact Jason Profitt at jprof7@gmail.com.