Your data belongs to you.

This page says, in plain language, exactly what Dandelion collects and stores, where it lives, why we keep it, and how to get it back or have it deleted. No legalese padding.

Last updated 2026-06-10

What this page covers

Two distinct categories of data. The policies differ because the contexts differ.

• Marketing data is what happens when you visit dandelion.build, submit a form, or email us.
• Product data is what you put into a Dandelion workspace as a customer: projects, files, contacts, messages, settings.

Marketing data

What we collect on the site

Cloudflare Web Analytics runs on every page. It records anonymous page views, referrer, and country. No cookies, no cross-site tracking, no personal identifiers. We do this because we need to know which pages work and which don’t. Cloudflare holds this data for 6 months and then drops it.

What we collect from forms

Everything you type into an intake, waitlist, or signup form: your name, email, company, and your free-text answers. Your IP and user-agent are recorded with the submission (standard, used only for abuse detection, never sold).

Where form submissions go

• Daniel’s inbox, via Resend (email delivery provider). Resend holds the message for operational reasons (bounce handling, delivery logs) and deletes it per their retention schedule.
• Dandelion’s own contact database. Leads are stored as contact records on the same platform we sell, so we can actually follow up. Same deletion rights as everything else on this page.
• Cloudflare Pages logs (the platform hosting this site), retained per Cloudflare’s standard schedule and used only for debugging delivery issues.
• Nowhere else. Your submission is never shared, sold, syndicated, or fed into a model.

How to get marketing data removed

Email [email protected] with the word “delete” and the email address you used. We remove the submission from the inbox and the contact database, and ask Resend to purge it. Confirmation within 48 hours.

Product data (your workspace)

The philosophy is simple. Your data is the currency of your business. You own it. You always own it. Dandelion holds it in trust as your data processor; you remain the data controller.

What we store

• Workspace content: the projects, video files, comments, contacts, orders, messages, and settings you and your team create or import.
• Account data: your name, email, and sign-in credentials (passwords are stored only as salted hashes).
• Usage and audit logs: every meaningful action in a workspace is logged with who did it and when. This exists so you can see what happened in your own account and so we can debug honestly.
• Billing records: what you bought and when. Card numbers never touch Dandelion; Stripe holds those.

Where it lives

On infrastructure Dandelion operates. Workspace data lives in a Postgres database hosted on Supabase (United States), scoped to your workspace by row-level tenant filters that make cross-workspace access structurally impossible. Files and video masters live in Cloudflare R2 storage. Encrypted off-site backups run automatically.

Why we store it

Three reasons, and only these: to run the product you pay for, to debug when something breaks, and to bill correctly. Nothing else.

What we do not do

• We do not train AI models on your data. Full stop.
• We do not share your data across workspaces. Your playbook stays yours.
• We do not sell, rent, syndicate, or bulk-export your data to anyone for any reason.
• We do not read your workspace content except when you ask for support on it or the law requires it.

Processors (the companies that touch product data)

Dandelion runs on standard infrastructure. The complete list of subprocessors:

• Supabase: database hosting (Postgres, United States).
• Cloudflare: compute, CDN, file and backup storage (Workers, Pages, R2), and the anonymous site analytics above.
• Stripe: payments. Card data lives with Stripe, never with Dandelion.
• Resend: transactional email (receipts, sign-in links, notifications).

If this list ever changes, this page changes with it.

Retention, export, deletion

Your data stays as long as your workspace is active. You can request a complete export at any time, at no charge. On cancellation your data stays exportable for 30 days, then it is deleted from our infrastructure. To delete specific data sooner, or everything, email [email protected]: confirmation within 48 hours, deletion as fast as backups allow.

Contact

Questions, data requests, anything: [email protected]. Humans answer humans here.