Privacy Policy

Effective date: June 12, 2026

1. Scope

Dance Partyis a business-to-business software platform that displays live data dashboards on shared office displays. Dashboards are built and refined through an embedded AI assistant we call the "DJ Agent." This Privacy Policy explains how Outergy Group, LLC ("Outergy Group, LLC," "we," "our," or "us") collects, uses, discloses, and safeguards information when you use the Dance Party web app at app.danceparty.ai, our connected applications, and our display app (collectively, the "Service").

This policy applies to information processed in our capacity as the operator of the Service. Where we process data on behalf of your organization (for example, dashboard content and connected integration data), your organization is the controller of that data and its own privacy practices also apply.

2. Information We Collect

We collect the following categories of information:

Account and workspace information: When you create an account or workspace, we collect your name, email address, workspace name, password credentials, and the roles and membership of users you invite.
Dashboards, widgets, and prompts: The dashboards and widgets you create, their configuration, and the instructions, prompts, and conversations you exchange with the DJ Agent while building or refining them.
Connected integration credentials and data: If you connect a third-party data source (for example, HubSpot, Salesforce, Slack, Notion, GitHub, Linear, Google services, or BambooHR), we receive the authorization credentials for that source and the data you authorize us to read in order to display it on your dashboards. All integrations are read-only.
AI provider API keys (BYOK): If you bring your own AI model provider key, we store that key so the DJ Agent can call the provider on your behalf. See Sections 4 and 5 for how these keys are protected and used.
Device information: Information about the display device and other devices running the Service, including device type, operating system, and the device-token identifiers used to pair a screen to your workspace.
Display reports and snapshots: If you report a dashboard or widget issue from the display app, we collect the selected reason, any optional note you enter, the screen and dashboard or widget identifiers, playback state, and a JPEG snapshot of the reported item so your workspace can review and fix rendering issues.
Usage and log data: Information about how you interact with the Service, including pages and features used, screen activity, request logs, and diagnostic information used to operate and secure the Service.

3. How We Use Information

We use the information we collect to:

Provide, operate, maintain, and secure the Service;
Build, refine, render, and display the dashboards and widgets you create, including on your paired screens;
Route your DJ Agent prompts and related content to the AI model provider you select so the assistant can respond;
Read and display data from the third-party sources you connect;
Manage your account, workspace membership, and subscription;
Send technical notices, updates, security alerts, and support messages;
Respond to your questions and customer-service requests;
Monitor, analyze, and improve performance, reliability, and usage of the Service; and
Detect, prevent, investigate, and address fraud, abuse, and security or technical issues.

4. Third-Party AI Providers (Bring Your Own Key)

The DJ Agent generates and updates widgets and dashboards using a third-party AI model provider. You may connect your own API key for a supported provider — Anthropic (Claude), OpenAI, or Google (Gemini). When you do, DJ Agent usage runs on your own provider account and is billed to you directly by that provider; we do not resell or mark up model usage.

When the DJ Agent runs, the prompts you write and the related content needed to fulfill your request (for example, the current widget or dashboard definition and relevant connected data) are sent to the AI model provider you selected. That provider processes this content under its own terms of service and privacy policy, which govern how the provider uses, retains, and protects it. We encourage you to review the privacy practices of the provider you choose. Outergy Group, LLC is not responsible for the data practices of third-party AI providers.

5. Integrations and Provider Keys

When you connect a third-party integration, we store the OAuth tokens or API-key credentials issued by that provider and use them only to read the data you authorize for display on your dashboards. Integrations are read-only: we do not create, modify, or delete data in your connected sources. You can disconnect an integration at any time from your workspace settings, which removes our stored access credentials.

Google user data: when you connect a Google service (Google Sheets, Google Analytics, Google Calendar, or Google Search Console), Dance Party requests read-only access and uses that data solely to display the dashboards you build. For Google Sheets, access is limited to the specific spreadsheets you choose to share with Dance Partythrough the Google file picker; we cannot see other files in your Google Drive. Google data is never used for advertising, never sold, and not transferred to others except as needed to provide the feature or as required by law. Dance Party’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI provider API keys you supply are encrypted with AES-256-GCM before they are stored. They are decrypted only on our servers, at the moment they are needed to call the provider, and are never exposed to your browser or to other workspaces.

6. Data Storage and Security

We implement technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of sensitive secrets: AI provider API keys are encrypted with AES-256-GCM and decrypted only server-side when needed to call a provider.
Encryption in transit and at rest: data is transmitted over encrypted connections and stored encrypted at rest.
Workspace isolation: our database enforces row-level security so that each workspace can access only its own data.
Trusted infrastructure: we host the Service on Vercel and store data in Supabase (PostgreSQL). These providers act as processors and maintain their own security programs.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. How We Share Information

We do not sell your personal information. We share information only as described below:

Within your workspace: with other members of your workspace, as governed by the roles your administrator assigns.
AI model providers: with the provider you select, to fulfill your DJ Agent requests (see Section 4).
Service providers: with infrastructure and processing vendors such as Vercel and Supabase that help us operate the Service.
Legal requirements: when required by applicable law, regulation, legal process, or governmental request.
Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you close your account or delete content, we delete or anonymize the associated information within 90 days, except where we are required to retain it for legal, accounting, or regulatory purposes, or to resolve disputes and enforce our agreements. Disconnecting an integration or removing a provider key deletes the associated tokens, credentials, or encrypted key from our systems.

9. Your Rights and Choices

Depending on your location, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, or to withdraw consent where processing is based on consent. You can also manage your account details, connected integrations, and provider keys directly in your workspace settings.

To exercise any of these rights, contact us at chris@danceparty.ai. We will respond consistent with applicable law.

10. Cookies and Analytics

We use essential cookies to operate the Service, including for authentication and session management. We do not use third-party advertising cookies. Any analytics we use are limited to understanding and improving how the Service performs and are not used for cross-site advertising.

11. Children's Privacy

The Service is intended for business use and is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will take steps to delete it promptly.

12. International Data Transfers

We operate in the United States, and our processors and the AI model providers you select may process and store information in the United States or other countries. Where we transfer personal information across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the effective date above. Material changes will be communicated through the Service or by email where appropriate. Your continued use of the Service after an update takes effect constitutes acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Outergy Group, LLC
Email: chris@danceparty.ai