DAYRUNNER / POLICIES

Privacy policy

Policy version: 2026-09-08

Dayrunner provides scheduling, customer records, job documentation and invoicing for service businesses. This notice covers the website and application.

Information and purposes

We process account names, email addresses, authentication records, business profiles, time zones and subscription records to operate accounts. Supabase handles password authentication. Businesses may add customer names, contact details, service addresses, job notes, photos, signatures and invoice records. These support the services requested by the business and its customers. Do not upload unnecessary identity documents, payment-card details or sensitive personal information.

Stripe collects card and bank information through its hosted services. Dayrunner stores account identifiers, transaction amounts, fees, refund and payout status. Resend processes recipient addresses and message content to send authorized service emails. Email queue records may contain private invoice links.

Business customers and their clients

A service business decides which client details to add and how to use them for its work. It is responsible for providing appropriate notices and obtaining permissions where required. Dayrunner processes those records to provide the platform. We separately use account and technical information for billing, security and operation. A business recording permission in Dayrunner is not a substitute for actually informing its customer.

Sharing and external services

Supabase provides authentication, database and storage; Stripe provides payments; Resend provides email delivery; the deployment's hosting provider operates the server. Their processing may involve locations outside your state or country. Fonts, icons and styling currently load from Google Fonts, cdnjs and Tailwind's CDN, which receive normal network information such as your IP address. Opening an external maps link sends you to that provider. We do not load map or video embeds automatically.

We may disclose information when legally required or reasonably necessary to address fraud, security incidents or legal claims. We do not sell customer records or use them for targeted advertising in this release.

Cookies, logs and analytics

Essential session storage supports login and form security. Device preferences remember your selected theme and privacy choices. If enabled by the operator and accepted by you, optional analytics records only daily counts for public pages. It does not record customer names, account IDs, invoice links, query strings, advertising IDs or browsing profiles. Hosting and security logs are separate and may contain IP addresses and request details. See the cookie policy for choices.

Retention and requests

We keep operational records while needed to provide the service, resolve disputes and satisfy applicable obligations. Financial records can require retention after a job ends. Deleting an unbilled job removes its database record and pending reminders, but does not automatically erase stored photos or backups. Canceling a subscription is not a request to erase all records. Contact the operator for access, correction, export or deletion requests. We may verify identity and retain records where permitted or required by law. Requests are handled within applicable legal deadlines.

Optional aggregate page counts are removed after 90 days when the counter maintenance runs. Other retention periods depend on the record and provider; the operator must maintain and review a retention schedule.

Your choices

You can change optional analytics preferences through Cookie settings. Businesses can withdraw permission for customer service emails from the client profile; already sent messages cannot be recalled. Customers can reply to the sending business to request changes. Marketing campaigns are not included or authorized by service-email permission. Rights to access, delete, correct, appeal or restrict processing depend on applicable law. Contact the operator for assistance.

Security and age

We use access controls and request protections, but no service can promise absolute security. Keep private invoice and recovery links confidential. Business accounts are intended for adults aged 18 or older. Do not create accounts for children or add unnecessary information about children.