Privacy Policy

1. What we collect

Account data: your name, email, and password hash when you sign up; your phone number if you provide it.

Workspace data: everything your business puts into the product — contacts, conversations, invoices, ledgers, employee records, documents. This data belongs to your business; we store and process it only to run the service.

Usage and security data: sign-in events with device and IP address (used to enforce the one-active-session rule and to give workspace owners an audit trail), and diagnostic logs needed to keep the service running.

Payment data: we never see card numbers. Payments are processed by Razorpay on daylink.in; we receive confirmation of the amount paid and an order reference.

2. What we do with it

We use your data to provide the service, enforce plan limits, prevent abuse, answer support requests and send transactional messages (receipts, trial reminders, security notices).

We do not sell personal data, we do not rent lists, and we do not use your workspace's business data to train machine-learning models.

3. WhatsApp and connected channels

When you connect a WhatsApp Business number, messages flow through Meta's Cloud API under Meta's own terms. Access tokens for connected channels are stored encrypted at rest. Instagram, Messenger and email channels work the same way through their respective providers.

4. Where data lives and how it is protected

Data is stored in a managed Postgres database (Supabase) with tenant isolation enforced by row-level security in the database engine itself. Access inside Daylink is restricted to what operating the service requires, and administrative actions on our side are logged to an append-only audit trail.

5. Your rights

You can export your data from the product, correct it in the product, and request deletion of your account or an entire workspace by emailing support. We honour deletion requests within 30 days, except records we are legally required to retain (such as tax invoices).

India's Digital Personal Data Protection Act applies to us as a data fiduciary; grievances go to the contact below and will be acknowledged within 72 hours.

6. Cookies

The product itself uses strictly functional cookies: your session, and a short-lived marker used by session enforcement. Advertising and measurement tags on the public website are described in the next section.

7. Advertising and measurement on our public website

We advertise on Google and Meta, and the public website may use Google Ads, Google Analytics and the Meta pixel to measure which ads lead to sign-ups. These tags can set cookies in your browser and record that a page was visited, that a sign-up was started or completed, and that a purchase was made, along with the ordinary technical details a browser sends, such as the page address and your IP address. We do not send them your name, email address or phone number, and nothing you enter into your workspace is shared with them.

To opt out, block or clear cookies in your browser settings, or use tracking protection. You can switch off personalised ads in your Google ad settings (adssettings.google.com) and your Meta ad preferences (facebook.com/adpreferences), and Google offers a browser add-on that stops Google Analytics measuring your visits (tools.google.com/dlpage/gaoptout). Opting out does not affect your use of the product.

8. Changes

If this policy changes materially, workspace owners are notified inside the product and by email before the change takes effect.