Legal

Privacy Policy

Last updated: October 3, 2026

We collect the minimum we need to run Daymuster. We don't sell your data. We don't use it to train AI models. This page is the long version.

What we collect

Account info: name, email, password hash, organisation name. You give us this when you sign up.
Workspace data: clients, tasks, time entries, comments, credentials (encrypted), invoices, and anything else you store. You enter this.
Operational logs: activity log (who did what, when), AI call log (which features ran, latency, cost), error logs. Kept for the periods listed under retention below.
Cookies: inside the app, a single sign-in cookie set by NextAuth. On the public website, the Crisp support chat sets its own cookie so a conversation survives a page change. No analytics cookies, no advertising cookies.
Server logs: Vercel records IP, user-agent, and path for every request, retained 4-7 days for diagnostics.
Page views on this website: we count visits to the public pages. The row holds the page, the referrer, any campaign tag, a country, a device type, and a one-way hash of your IP and browser that changes every day, so it cannot be tied to you or followed across days. Nothing on this is recorded once you sign in.

What we don't collect

Payment card numbers, those go directly to PayPal.
Browsing history outside Daymuster.
Location data beyond what's inferable from IP.
Health, biometric, or government-ID data.

Why we collect it

To run the service you signed up for. Specifically: to authenticate you, render your workspace, run AI features when enabled, deliver invoice and trial-expiry emails, prevent abuse, and meet our legal obligations. The legal basis is "performance of a contract" (GDPR Art. 6(1)(b)) plus "legitimate interest" (Art. 6(1)(f)) for security and fraud prevention.

Who we share it with

Vercel, hosts the app and serves traffic. United States (us-east-2).
Neon, Postgres database hosting. US region.
Anthropic, receives AI prompts when AI features are enabled. Their data-use terms forbid training on customer data. Your AI history (which prompts) is logged in our DB; the prompt content is not retained beyond the immediate response.
Resend, sends transactional email (password reset, invitations, trial expiring). EU/US data residency.
PayPal, processes subscription payments. We pass them an organization id; they handle the card details.
Sentry, receives error reports and a sample of performance traces so we can fix problems. Page addresses are cleaned of access codes and tokens first, and request bodies, cookies and most headers are removed.
Crisp, runs the support chat on the public website. It receives what you type into the chat and the page you are on.
Google, if you sign in with Google, or if your workspace switches on the Google Chat integration. It receives your name and email, and in the Chat case the notification text.
Backblaze and GitHub, between them take and hold the nightly database backup. GitHub runs the scheduled job; Backblaze stores the file.

We don't share data with anyone else unless legally required (subpoena, court order), or you tell us to (e.g. data-export support tickets).

Gmail

Daymuster no longer offers a Gmail integration (it was removed on 14 September 2026). We don't request access to Gmail, and the stored connection tokens were deleted with the feature. Signing in with Google shares only your name and email address.

How long we keep it

Active workspace data: until you delete it.
Soft-deleted workspace: 30 days, then erased from the live database, with every file stored for it. Off-site backups are a separate copy, encrypted and private, deleted 30 days after they are taken, so a copy can persist there for up to 30 days more. They are only ever restored to bring the service back.
Deleted task: 24 hours in Trash, then erased with its files, unless it has logged hours or a client approval, which are kept for billing records. An image another task still shows is moved to that task first.
Deleted client: 30 days in Trash, then erased with its Knowledge files. Invoices are kept for accounting.
AI call logs: 30 days.
Activity log (the audit trail and each task's history), credential-reveal log, platform admin log: 1 year.
Client portal analytics: 180 days.
Server logs (Vercel): 4-7 days.
Page views on the public website: kept indefinitely today. They carry no identifier that can be tied to a person, only a hash that changes daily.

Your rights (GDPR / CCPA)

If you're in a jurisdiction with data-protection laws, you have the right to:

Access: see what we have. Everyone, teammates and client logins alike, can download their own data from Settings → Download my data: profile, tasks, comments, time, attendance, leave, paid payslips and activity (files are listed by name). The workspace admin can also download the whole workspace as CSV from Settings → Advanced → Data export.
Rectify: correct it. Edit it in the dashboard.
Erase: delete your account from Settings → Erase my account. The admin deletes the whole workspace from Settings → Advanced → Danger zone.
Object: push back on a processing activity. Email privacy@theauctores.com.
Port: get a machine-readable copy. Your own data comes as one JSON file; the workspace export is CSV.
Withdraw consent: for any optional processing (AI features). Toggle them off in Settings.

We respond within 30 days. We may verify your identity before acting on a request.

Security

TLS 1.2+ everywhere. AES-256-GCM for the credential vault (with a per-deployment master key, rotatable). Bcrypt for passwords (10 rounds). Tenant data is scoped at the database layer, every relevant table carries an organizationId column and every query is filtered by it. We do internal security reviews of new code paths.

International transfers

Our infrastructure providers (Vercel, Neon, Resend, Anthropic) are based in the US. If you're in the EEA, your data may be transferred to the US under standard contractual clauses. PayPal handles its own cross-border transfer compliance.

Children

Daymuster is for businesses. We don't knowingly collect data from anyone under 18. If you believe we have, email privacy@theauctores.com and we'll delete it.

Changes

We'll email the workspace owner about material changes 30 days before they take effect. Minor clarifications get a "last updated" bump and no notice.

Contact

Privacy questions: privacy@theauctores.com. General support: connect@theauctores.in.