How your data is protected

You choose what the dashboard reads

A Google Sheet you share view-only, files you upload, amounts you type, or, where available, a connection you approve in your own Shopify, Meta or QuickBooks account. We never ask for, see, or use your passwords.

It never changes anything you connect

The dashboard never changes anything in your store, ad account or books. Shopify and Meta connections use read-only permissions. QuickBooks offers only one permission for this kind of connection, which would allow changes, so there the promise rests on our software, which only reads.

The dashboard only reads spreadsheets and never changes them. We ask you to share your sheet view-only; if setup needs a helper tab or column in your workbook, we ask first, and you can set our access back to view-only when setup is done.

You can end access yourself

You can end our access any time without asking us: remove the app in your Shopify or QuickBooks settings, revoke the ad connection, or un-share the sheet. Future reads stop right away. If you connected a sheet by its published link, unpublish it instead. Numbers the dashboard has already read stay in your dashboard until you ask us to delete them.

Secrets stay out of the code, and the disk is encrypted

Access keys are kept as secrets in the hosting platform's settings or, for connections you approve yourself, encrypted inside your dashboard's database, never in the code or in a spreadsheet. Anything secret the dashboard itself must keep (like two-factor seeds) is encrypted inside the database, which itself sits on an encrypted disk. Sign-in sessions use signed, HTTPS-only cookies, and you can turn on two-factor authentication from your account page.

Each client's data is kept separate

Every client gets their own deployment: a private web address and a separate database. Each dashboard only shows the businesses its users are allowed to see; the server refuses requests for anyone else's data, it doesn't just hide the menu. One limit to know: every dashboard reads Google Sheets through the same Margin Machine reader account, so keep your sheet links private.

Sign-ins and support are logged

Every sign-in and every failed attempt is recorded in the security log, and you can see your own recent sign-ins on your account page. Dan looks at your dashboard to set it up, to check your first weeks of numbers against your own records, when you ask for help, and when something needs fixing.

If you add a support user, support views are logged once a day for each support user, where you can see them. Your settings include a switch that blocks support access: when it's off, support users can no longer open your business, and even the refused attempts show up in your log. Support access is read-only, too: a support session can look, but the server refuses any change it tries to make and logs that attempt for you as well.

One honest limit: as the operator, we also keep administrative access to the servers and to the dashboard's administrator sign-in. It can view and change everything, it is not blocked by the switch, and it does not show in your log. We use it only for setup, repairs and emergencies.

Your data is never sold

Your numbers exist to show you your profit. Nothing is sold or used for advertising. The companies that help us host and run the service receive it to do that, and our privacy policy names them, including the AI assistants we use for setup and support.

To be precise about the boundary: this marketing website uses analytics and advertising tools (PostHog, including session recordings, and the Meta pixel), explained in the privacy policy. The dashboard product itself contains no third-party analytics at all.