Privacy Policy

Daytara is operated by To be confirmed: registered business name. Mailing address: To be confirmed: mailing address.

For any privacy question or request, email nova@daytara.com.

Your account. When you create an account we store your email address, the name you enter (optional), your sign-in method and sign-in times. You can sign in with an email and password, with Google, or with Lovable. If you use Google or Lovable, we receive your email address and basic profile details from that service; we do not receive your password for it.

Your venues and team. Venue names and settings, targets you set, the people you invite (their email address, role and permissions) and a log of team and connection changes (who made the change and when).

Reports you import. When you upload a report (for example a sales, labour, reservation, event or settlement export), you choose which columns Daytara uses. Only those columns leave your browser and are stored, together with a copy of the file that contains only those columns. Columns you don't map, such as guest or employee contact details, are not uploaded. Some report types never import guest or employee names at all.

Connected services. When someone with permission connects a business account, Daytara reads data from it in read-only mode. For each service we store an access credential and the data listed below.

• Instagram (permissions instagram_basic and instagram_manage_insights): the account's ID, username, name, follower, following and post counts; for each post its ID, caption, type, link, publish time, thumbnail link, like and comment counts; and post and account insights (views, reach, saves, shares, profile views). We also store the ID of the Meta business portfolio that shared the account, which Meta links to the access. Meta's sign-in screen for Instagram also lists instagram_manage_messages (permission to manage messages), because Meta requires it for this kind of sign-in. Daytara never uses it: it does not read, store or send Instagram messages.
• Facebook Pages (permissions pages_show_list, pages_read_engagement and read_insights): the Page's ID, name, username and follower count; for each post its ID, text, link, publish time, type, and total share, reaction and comment counts; and Page and post view insights.
• Other services you connect (for example TikTok, Pinterest or TripleSeat) are read the same way, limited to the business information needed for reporting.

From Instagram and Facebook we read totals only: we do not collect direct messages, the content of comments, or the names or profiles of the people who follow, like or comment. We do not request permission to publish.

Technical information. Your sign-in session is kept in your browser's storage so you stay signed in. While you connect a social account, a short-lived cookie links the sign-in window to your browser. Daytara itself does not use advertising or analytics trackers. If a page fails, a technical error report (the page address and error message) may be sent to our hosting provider so we can fix it. To be confirmed: whether the hosting provider collects any other usage information

• To show your venue's dashboards, reports and daily briefing, and to keep connected data up to date.
• To control who can see and change each venue's information.
• To send account emails you request, such as sign-up confirmation and password reset. Daytara does not currently email reports or marketing.
• To keep the service secure, investigate problems and respond to your requests.

We do not sell personal information, and we do not use data from connected accounts for advertising or to build profiles of individuals.

Access is granted per venue. Only people who are members of a venue can see its information, and what they can do depends on the role and permissions the venue's owner or manager gives them. An account connected for a group of venues is visible to the venues it is shared with.

We use service providers to run Daytara, including our hosting, database and sign-in provider, and Google if you choose to sign in with Google. They process information only to provide their service to us. To be confirmed: full list of service providers and their roles

We may disclose information if the law requires it. To be confirmed: circumstances and process for legal requests, and treatment of data in a sale or transfer of the business

Information is stored and processed in: To be confirmed: countries or regions where data is stored and processed.

• Account, venue and imported report data is kept while the account or venue is in use, so that historical comparisons stay accurate. Daytara does not currently delete this data automatically on a schedule.
• Access credentials for a connected service are deleted as soon as the account is disconnected in Daytara.
• Data already collected from a connected account is kept after disconnecting unless you choose to delete it at the same time, or ask us to (see Data deletion).
• A record that an account was connected or disconnected, and by whom, is kept in the venue's change log.
• After an account or venue is closed: To be confirmed: retention period after closure and for backups.

• Disconnect any connected account from Integrations in Daytara, and choose whether to delete its stored history.
• Remove Daytara's access from the service itself (for example in your Instagram or Facebook settings).
• Ask us for a copy of your information, to correct it, or to delete it, by emailing nova@daytara.com. We aim to respond within To be confirmed: response time.

Depending on where you live, you may have additional rights under privacy law, including the right to complain to a privacy regulator. To be confirmed: applicable privacy laws and regulator contact details

Access credentials for connected services are kept only on Daytara's servers and are never sent to your browser. Every request for a venue's information is checked against that venue's membership and permissions. No method of storing or sending information is completely secure, so we can't guarantee absolute security.

Daytara is a tool for businesses and is not intended for children. Accounts are for people aged To be confirmed: minimum age or older.

The demo venue shown in Daytara contains fictional data only. It is clearly labelled and does not describe any real business or person.

If we change this policy, we will update the date at the top of this page. To be confirmed: how account holders are notified of material changes

Email nova@daytara.com with any privacy question, request or complaint.