Privacy Policy
Effective Date: August 27, 2025
Dayframe Inc. (“Dayframe,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our AI-powered project management platform (the “Service”), accessible via our website at www.Dayframe.com, mobile apps, or related services. By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.
We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other relevant regulations. We are SOC 2 Type II certified, ensuring enterprise-grade security practices.
1. Information We Collect
We collect information to provide, improve, and personalize the Service. The types of information we collect include:
a. Personal Information
Account Information: When you create an account, we collect your name, email address, password, company name, job title, and billing information (e.g., credit card details processed via secure third-party providers like Stripe).
User-Generated Content: Tasks, projects, comments, files, chats, and other content you upload or create within the Service.
Communication Data: Information from emails, support tickets, or chats you send to us.
Integration Data: If you connect third-party services (e.g., Slack, GitHub, Google Workspace), we may collect data from those integrations, such as access tokens or synced content, with your permission.
b. Automatically Collected Information
Usage Data: Device information (e.g., IP address, browser type, operating system), log data (e.g., access times, pages viewed), and interaction data (e.g., features used, time spent on tasks).
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user activity, remember preferences, and analyze trends. This includes essential cookies for functionality, performance cookies for analytics, and targeting cookies for personalized features. You can manage cookie preferences via your browser settings.
Analytics Data: Aggregated insights from tools like Google Analytics, including session duration and user flows, to improve the Service.
c. Information from Third Parties
We may receive data from partners, such as authentication providers (e.g., Google OAuth) or payment processors, to facilitate logins or transactions.
We do not collect sensitive personal information (e.g., racial or ethnic origin, political opinions, health data) unless you voluntarily provide it in user-generated content, and we advise against doing so.
2. How We Use Your Information
We use your information for the following purposes:
To Provide and Maintain the Service: Manage your account, enable AI-powered features (e.g., task prioritization, predictive timelines), facilitate collaboration, and process payments.
To Improve the Service: Analyze usage patterns to enhance AI algorithms, detect bottlenecks, and develop new features like smart analytics or automations.
To Communicate with You: Send service updates, newsletters, security alerts, or respond to inquiries. You can opt out of marketing communications at any time.
For Security and Compliance: Monitor for fraud, enforce terms, and comply with legal obligations, including audit logs and role-based access controls.
For Research and Development: Anonymize data for AI training and aggregate insights to benchmark performance (e.g., team velocity metrics) without identifying individuals.
For Personalization: Tailor recommendations, such as auto-assignment based on skills and workload.
We process data based on legal grounds including your consent, contract performance (e.g., providing the Service), legitimate interests (e.g., security), or legal requirements.
3. Sharing of Your Information
We do not sell your personal information or use it for advertising. We may share data in limited circumstances:
With Service Providers: Third-party vendors (e.g., cloud hosting like AWS, analytics like Mixpanel) that help operate the Service, bound by strict confidentiality and data protection agreements.
With Integrations: Data shared with connected tools (e.g., Salesforce, Zoom) as authorized by you.
For Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred with notice and consent where required.
For Legal Reasons: If required by law, subpoena, or to protect rights, property, or safety.
With Your Consent: For any other purpose with your explicit approval.
We ensure all recipients comply with GDPR or equivalent standards, using mechanisms like Standard Contractual Clauses for international transfers.
4. Data Security
We prioritize security with measures including:
256-bit AES encryption for data at rest and in transit.
SOC 2 Type II certification, GDPR compliance, ISO 27001, CCPA, and HIPAA-ready features for Enterprise plans.
Role-based access controls, audit trails, SSO/SAML integration, and regular third-party security audits.
A dedicated security team and bug bounty program to identify vulnerabilities.
99.9% uptime SLA with 24/7 monitoring.
Despite these efforts, no system is infallible. We notify users of breaches as required by law.
5. Your Rights and Choices
You own your data completely and can:
Access and Export: Request a copy of your data via the Service or our contact page.
Correct or Update: Edit your information in your account settings.
Delete: Request deletion of your data, subject to legal retention requirements (e.g., billing records for 7 years).
Opt-Out: Withdraw consent for processing, restrict use, or object to automated decisions.
CCPA/CPRA Rights (for California Residents): Opt-out of “sales” (though we don’t sell data), request disclosure, deletion, or non-discrimination.
GDPR Rights (for EU Residents): Exercise rights to access, rectification, erasure (“right to be forgotten”), restriction, portability, and objection.
To exercise rights, contact us at our contact page. We respond within 30 days (or 45 for CCPA). For data portability, export features are available in the Service.
6. Cookies and Tracking
We use cookies for essential functions, analytics, and personalization. Third-party cookies (e.g., from Google Analytics) may track across sites. Manage preferences in your browser or via our cookie banner. Note that disabling cookies may limit Service functionality.
7. International Data Transfers
Dayframe is based in Toronto, Canada, with servers in secure data centers (e.g., AWS regions). Data may be transferred internationally, protected by adequacy decisions (e.g., Canada-EU) or safeguards like Standard Contractual Clauses.
8. Children’s Privacy
The Service is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from minors. If we discover such data, we delete it promptly.
9. Changes to This Privacy Policy
We may update this Policy to reflect changes in practices or laws. We notify users via email or in-Service notices for material changes, with the updated effective date. Continued use constitutes acceptance.
10. Contact Us
For questions, concerns, or requests:
Contact: our contact page