Hi folks. Thanks very much for the feedback (thoughtful feedback like yours is something I'd never consider 'bashing'...it's really, really useful). A couple of comments:
About our T's & C's. In creating our T's & C's we literally evaluated the terms of other very popular, related sites and tried to compile the agreement borrowing from their legal expertise. So, you will definitely see the fingerprints of eBay, Facebook, Etsy, Flickr and other sites in our T's & C's. All of these sites have a section of their terms that talk about how they can use info you post to their sites. From my reading, it is to protect their liability from people who would post content and then claim compensation for it's display, use, etc. In other words, it seems to be a way to blanket avoid liability for people's submissions, and that seems smart in a world where people can (and do) submit gobs of who-knows-what content and try to concoct legal claims from the use of it. The language just says that the sites can't be liable for submitted content.
From the DASH standpoint, I think it too seems prudent to have these protections in place. It is in NO WAY our intention to use your information for our commercial gain. We'd never sell your photos. (We recently inadvertently used someone's photo in a fairly benign way, and we promptly apologized for our innocent oversight.) We enable you to make the info you submit to your collection completely private. Info submitted to the Catalog is by definition part of the public, community resource so I hope anyone that contributes/submits to the Catalog knows they are certainly contributing for public benefit.
So, while the T's & C's protect DASH's use of the submitted info, it doesn't say that we WILL use the info. If you can think of a better way to preserve our protection against people that would try to make claims against us for submitted content while meeting your needs, I would certainly be willing to consider changing our T's & C's. I'm serious and for sure willing to update our T's & C's provided we can keep protected, but I also know that the way the "big boys with big legal teams" write their T's & C's is a smart place for us to base our policies on.
With regard to general data protection, I've written in earlier threads about how we are architected for securing user data. User credentials are always transmitted via encrypted communications, user passwords are stored as encrypted on the server (we honestly can't see or know anyone's password), and our servers lie behind several layers of highly secure firewalls. Trainman52 mentioned the hack of Target (and I too had to cancel my credit card as a result). While DASH is not immune from attack, we are simply a MUCH less interesting target for the bad guys because we do not store anyone's credit card information. We never touch it, never transmit it, never store it.
Our team, in past careers, has built systems for enterprise customers and we understand lots of different levels of user data protection. To the extent we deem it necessary to increase our protections for user's data, we will do so, but for now we think we're very secure in our protection of people's data.
To sinclair's comment that our collection management capabilities seem to be geared around helping people sell their items, I can tell you that wasn't our design point at all. In fact, we developed the collection management before we even had a marketplace capability. We want to help collectors keep track of what they have and want, since that is a common and essential need. Being able to do interesting other things with that info (share, sell, value, print, go mobile, etc) is something we are continually evolving and one of the things that makes DASH more useful in general.
Again, I really appreciate the feedback and I hope you see the thoughtful consideration I give it via my response.
- Bill