Start the trial
Menu

Privacy policy

Draft of 15 November 2026

1. Who this policy covers

Daytide is provided by [Company legal name and registered address] (“Daytide”, “we”). This policy covers three groups of people, and our role is different for each.

  • Visitors to this website. We are the controller of the little data the site handles.
  • Account holders: the person who signs a firm up, and anyone invited to its workspace. We are the controller for account and billing data.
  • People whose working time is recorded by the Daytide app because their employer uses it. For this data the employer is the controller and we are a processor acting on the employer's instructions under thedata processing agreement.

2. This website

This website sets no cookies and runs no analytics or advertising scripts. [Confirm before launch. If analytics are added, name the tool, the data and the lawful basis here.] Our hosting provider keeps ordinary server logs (IP address, time, page requested) for [period] for security.

3. Account data

When you create an account we handle your name, work e-mail address, password (stored only as a hash), the name of your firm, your role in the workspace, and records of sign-ins. If you pay for a plan, our payment provider [name] handles your payment details. We do not store card numbers.

Lawful basis: performance of the contract with your firm, and our legitimate interest in keeping accounts secure.

4. Working-time data recorded by the app

The Daytide desktop app records, for each stretch of activity on a work computer:

  • start and end time, and whether the computer was active, idle, locked or asleep;
  • the name of the application in front;
  • the window title, the document path and the web address, each reduced according to the firm's settings;
  • flags for a private window, a meeting window or a full-screen window.

The app does not record and cannot be configured to record:

  • screenshots or screen recordings;
  • keystrokes, mouse movement or clipboard contents;
  • the contents of files, e-mails or messages;
  • camera or microphone input.

Before data leaves the computer the app removes e-mail addresses, phone numbers, bank account and card-like numbers, long runs of digits, tokens and keys in web addresses, query strings, and the person's own account name. The same removal runs again on our servers. Applications and websites in excluded categories (by default banking, health, personal webmail, social media, shopping, password managers, adult content and job sites) are recorded only as personal time with a duration.

The employer decides the purposes for which this data is used and must have a lawful basis for it. In most European countries that basis will be legitimate interest, supported by an assessment the employer carries out. We provide [template assessments, to be prepared] to help.

5. Use of AI

Daytide uses AI models provided by Anthropic (Claude models) to suggest which client, project and kind of work a stretch of activity belongs to, to answer questions in chat, and to write summary reports. Before any data is sent to a model a further, stricter masking step runs. Models receive cleaned titles, site names and, for files, the folder, file type and a cleaned name.

[To confirm with the provider and state here: that data sent is not used to train models, the retention period at the provider, and the processing region.]

Daytide does not make decisions about individuals that have legal or similarly significant effects. Labels applied automatically are marked as such, show the evidence used, and can be changed by the person concerned.

6. Who sees the data

Each person can see everything recorded about them. Owners and managers of a workspace see team-level totals by default. Per-person detail is a setting that is off by default and is visible to staff when switched on. Daytide staff access workspace data only to provide support, in a read-only mode that is shown on screen and logged.

7. Sub-processors

  • [Hosting provider, country]: servers and database.
  • Anthropic (Claude models): AI processing as described above.
  • [E-mail delivery provider, country]: account e-mails such as invitations and sign-in links.
  • [Payment provider, country]: billing.

8. Where data is stored and for how long

Data is stored in [region]. [State whether an EU hosting option exists.] Working-time data is kept for [period] after it is recorded, or until the firm deletes it or closes its workspace, whichever comes first. After a workspace is closed its data is deleted within [period].

9. Your rights

Depending on where you live you may have the right to access, correct, export, restrict or delete your personal data, and to object to its processing. If your working time is recorded through an employer's workspace, you can see and export your own data in the app and send a deletion request from the same place. Your employer, as controller, answers that request. If you cannot get an answer, write toprivacy@daytide.ai and we will pass it on and follow up.

You may also complain to the data protection authority in your country.

10. Changes and contact

We will post changes to this policy on this page and tell workspace owners by e-mail before a material change takes effect. Questions: privacy@daytide.ai. [Add the name and contact of the EU or UK representative and the data protection officer, if appointed.]