Privacy Policy
Last updated: May 2026
1. Data Controller
Thomas Nekam
Urbaniweg 14, 7000 Eisenstadt, Austria
E-Mail: support@dummy-bi.com
Web: https://www.dummy-bi.com
2. What We Collect
- Email addresses — when you join a waitlist, subscribe for updates, or sign up for the newsletter.
- Subscription and consent details — which form you used, whether you opted in to product emails, confirmation and unsubscribe timestamps, confirmation tokens, and the IP address used at signup so we can document consent and prevent abuse.
- Feedback you submit — your message, optional email address, optional rating, and submission source.
- Purchase and license delivery data — if you buy a paid product, Lemon Squeezy sends us the buyer email, order or subscription status, order number, and amount needed to deliver templates, license keys, and support.
- Technical request data — hosting and security logs may include IP address, timestamp, requested URL, user agent, and similar metadata.
3. What We Do NOT Collect
- We do not collect, process, or store any Power BI files, datasets, or reports. All processing happens locally on your machine.
- The desktop tool does not transmit any content from your Power BI files to our servers. It may check for software updates via a secure HTTPS request, which contains only the current version number — no report data or metadata.
- Optional connectors for Power BI service, Fabric, Azure DevOps, GitHub, and Databricks connect directly from your device to those services using credentials you provide. We do not receive or store those credentials or connector results.
- We do not load advertising pixels, behavioral tracking scripts, or analytics cookies on this website.
- We do not share your email address with third parties for their own marketing purposes.
4. Cookies and Analytics
This website does not currently set or read non-essential cookies, local storage, or similar browser storage for analytics or advertising. We do not use Google Analytics, Plausible Analytics, Meta Pixel, Hotjar, or comparable tracking tools.
Because no non-essential analytics or advertising storage is used, we do not currently show a cookie consent banner. If we introduce analytics, advertising, or any other non-essential browser storage in the future, we will ask for opt-in consent before loading it.
5. Legal Basis for Processing (Art. 6 GDPR)
- Consent (Art. 6(1)(a)) — when you subscribe to newsletters, waitlists, launch notifications, or optional getting-started/product emails. We use a double opt-in process before sending subscription emails.
- Contract performance (Art. 6(1)(b)) — when we process data to deliver requested digital content, a purchased product, a license key, or support.
- Legitimate interest (Art. 6(1)(f)) — for website hosting, security logging, rate limiting, spam prevention, responding to feedback, and improving the service without behavioral tracking.
- Legal obligation (Art. 6(1)(c)) — where we must retain purchase or accounting records under applicable law.
6. Providing Personal Data
Providing your email address is required if you want us to send a waitlist notification, newsletter, purchase email, license key, or support reply. Without an email address, we cannot provide those email-based services.
Feedback messages are required when you submit feedback. Adding your email address to feedback is optional and only needed if you want us to reply. Purchase, invoice, and payment information may be required by Lemon Squeezy and by applicable accounting or tax rules.
7. How We Use Your Email
- To send you a confirmation email to verify your address (double opt-in).
- To send you a welcome email after joining the Automate waitlist.
- To invite you to private beta access when it becomes available.
- To notify you about product updates (if opted in).
- To notify you when Dummy BI Engine launches (if on the waitlist).
You can withdraw your consent and unsubscribe at any time using the link in every email we send, or by emailing support@dummy-bi.com.
8. Data Processors (Sub-Processors)
We use the following third-party services to operate Dummy BI. We enter into appropriate data processing or service terms where required:
| Service | Purpose | Data Involved |
|---|---|---|
| Supabase | Database and backend storage | Subscribers, feedback, purchases, and consent records |
| Resend | Transactional and subscription email delivery | Email address, email content, and delivery metadata |
| Vercel | Website hosting, serverless functions, and scheduled jobs | Technical request data and server logs |
| Lemon Squeezy | Payment processing as Merchant of Record | Checkout, payment, order, subscription, and buyer data |
| GitHub | Release hosting and optional update checks | Release and update-check metadata; no report data |
9. International Transfers
Some service providers, including payment and infrastructure providers, may process personal data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as EU adequacy decisions, Standard Contractual Clauses, or the provider's contractual transfer mechanisms.
10. Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
11. Data Retention
We retain subscriber records while your subscription, waitlist request, or product access relationship is active. When you unsubscribe, we stop sending emails and keep only the information needed to honor the unsubscribe request, document prior consent, prevent abuse, or meet legal obligations.
Feedback is kept as long as needed to review, respond to, and improve the product. Purchase, invoice, and license records may be retained for statutory accounting, tax, warranty, and fraud prevention periods.
12. Your Rights (Art. 15–21 GDPR)
You have the right to:
- Access — request a copy of the personal data we hold about you (Art. 15).
- Rectification — correct inaccurate data (Art. 16).
- Erasure — request deletion of your data (right to be forgotten) (Art. 17).
- Restriction — restrict processing under certain conditions (Art. 18).
- Data portability — receive your data in a machine-readable format (Art. 20).
- Objection — object to processing based on legitimate interest (Art. 21).
- Withdraw consent — at any time, without affecting the lawfulness of prior processing.
To exercise your rights, email support@dummy-bi.com. We will respond within 30 days.
13. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Wien
Tel.: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Web: www.dsb.gv.at
14. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email to active subscribers. The Last updated date at the top reflects the latest revision.
15. Contact
For privacy questions or data requests, email support@dummy-bi.com.