Data covenant

What Dunster does with what you give it, in plain words.

Three levels, three audiences

• The card (L0) is public. It holds the title, one paragraph, sector, tasks, state, size band and timeframe of a use case, and the public parts of a builder profile. Search engines may index it.
• The dossier (L1) is for registered members. It holds the goal, the pain in your words, process steps, objects, variability, rates, environment, people nearby, size in numbers and the redacted media. It never carries your organization's name or a link to it.
• Identity (L2) is for one introduced pair after a mutual yes, and for Dunster. It holds the organization name, the people and their emails, the existing integrator and the original media.

Dunster's team sees everything in order to review posts, verify organizations, match by hand and check safety evidence. Every action in the admin console leaves an audit entry.

What Dunster uses it for

Running the platform: reviewing, matching, introducing, tracking deal status, and verifying the safety badge. Improving the Benchmarking Engine and the matching, in aggregate. Telling the story of what members build, only with consent through the Spotlight feature.

What Dunster does not do

• Reveal an end user before a mutual yes, or link a post to an organization below L2.
• Sell or share member data with third parties. Assessment data is not shared with insurers in this release.
• Use the dossier or identity level for advertising. Ads, when they arrive, target the card fields only.
• Rank for money.

Onboarding answers

Each question in the onboarding survey says who sees the answer. A builder's answers are public on its profile, for registered members only, or private to Dunster. An end user's answers are either on its profile, next to its name, or seen only by the organization and Dunster. Builders see an end user's profile only after a mutual yes; the profile settings say which other end users see it. Private answers are used for verification and matching and never appear on a profile.

Retention and deletion

Posts, cards and comments stay while you are a member and can be closed or removed by you at any time; closed posts remain readable so the record of what was asked stays honest. Safety assessments are kept for three years. Sign-in links expire in 20 minutes and sessions in 30 days. Ask Dunster to delete your organization and it removes identity-level data within 30 days, keeping only what the law or an open introduction requires.

Media

Redacted media is served to signed-in members. Original media is served only to the introduced builder after a mutual yes. Files are stored by Dunster and never embedded on third-party sites.

Questions

Write to the address on dunster.ai. This covenant is part of the terms.