1. Who is responsible for your data
Daytalens is operated by its founder, trading as Daytalens, who is the controller (POPIA: responsible party) for the data described here. For the operator’s full legal and registered details, or to serve a formal data request, write to team@daytalens.com.
2. What we collect
We collect the information you give us directly:
- Account information: name, email address, and authentication details (Google/Facebook sign-in or email and password).
- Business profile: your business name, industry, location, and description.
- Intake answers: what you tell us about your customers, your prices and costs, how you got your customers, your public bio, and the decision you are weighing — the raw material your verdict is built from.
- Usage data: the verdict and report you view, and actions you take in the service.
- Payment information: processed securely by our payment provider — we do not store your card details.
- Technical data: IP address, browser type, device information, and basic analytics.
3. How we use it
We use your information to:
- Provide the service and generate your verdict and report from your own answers.
- Process your one-time payment and give you access to your full report.
- Send you important messages about your account and your verdict.
- Improve the service using anonymised, aggregated data.
- Prevent fraud and keep the service secure.
- Comply with our legal obligations.
4. Who we share it with
We do not sell your personal data. We share information only with the providers who help us run the service:
- Supabase — database and authentication.
- Anthropic and Google — the AI models that read your answers and generate your verdict.
- Our payment provider — to process your payment.
- Hosting providers — to serve the site.
- Legal requirements — when required by law, court order, or to protect our rights.
- Business transfers — in connection with a merger, acquisition, or sale of assets.
The answers we send to AI providers are used solely to generate your verdict and are subject to those providers’ data-processing terms.
5. Data security
We use industry-standard measures including encryption and secure authentication. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.
6. How long we keep it
We keep your information for as long as your account is active or as needed to provide the service. Your verdict and report are stored for the life of your account.
You can delete your account yourself, at any time, from your account page. Deletion happens immediately rather than on a delay: your profile, your intake answers and your verdict are removed at once and cannot be recovered by us or by you.
The one exception, stated plainly: if you have paid, we keep the transaction record with your account detached from it. We are legally required to retain financial records, and we need them to honour a refund claim you may still be entitled to make. What remains is the payment, not a profile of you.
7. Your rights
Depending on where you live, you may have the right to:
- Access — request a copy of your personal data.
- Correction — update or correct inaccurate information.
- Deletion — delete your account and data yourself from your account page, or ask us and we will do it.
- Portability — request your data in a machine-readable format.
- Opt out — unsubscribe from marketing messages.
- Objection — object to certain processing of your data.
GDPR (EU/EEA and UK): additional rights apply, including the right to complain to your supervisory authority. POPIA (South Africa): you may lodge a complaint with the Information Regulator. CCPA (California): you have rights under the California Consumer Privacy Act, including the right not to be discriminated against for exercising them. To exercise any of these, contact us below — we do not charge for it and we do not ask why.
8. Why we are allowed to process it
Under GDPR and POPIA we have to name a basis for each use, so here they are:
- Performance of a contract — your account, your intake answers, and generating and storing the verdict you bought.
- Consent — analytics, which you can decline, and marketing email, which you can unsubscribe from at any time.
- Legal obligation — keeping transaction records after you delete your account.
- Legitimate interests — fraud prevention, rate limiting and keeping the service secure, balanced against your rights.
9. Cookies, analytics and your choice
Essential only, unless you say otherwise. Sign-in and session cookies are necessary for the service to work at all, so they are always set. Nothing else is.
Analytics are off until you accept them. On your first visit you are asked, and declining is one click and works exactly like accepting — the site behaves identically either way. Until you accept, no Google Analytics script is loaded, no analytics cookie is written, and nothing is stored on your device. If you accept and later change your mind, clear this site’s data in your browser and you will be asked again.
We also use Plausible, a cookieless analytics tool that stores nothing on your device and does not identify you. It runs regardless of your choice, because there is nothing to consent to.
10. Children
Daytalens is not intended for anyone under 18. We do not knowingly collect information from children. If we learn we have, we will delete it.
11. International transfers
Your information may be transferred to and processed in countries other than your own. We take appropriate steps to protect it in line with this policy.
12. Changes to this policy
We may update this policy from time to time and will notify you of significant changes by email or in the service. Continued use after changes take effect constitutes acceptance of the updated policy.