Privacy Policy
Effective · Last updated
DailyAi.Work is built to keep your AI work private. The browser extension stores your saves on your device; the web app stores only what you need for your account. We never sell your data.
Who we are
DailyAi.Work ("DailyAi.Work", "we", "us") operates https://dailyai.work, the DailyAi.Work web app, and the DailyAi.Work browser extension. We are the controller of the personal data described in this policy.
Questions or requests: support@dailyai.work.
Data we collect
Account data (web app):
- Name, email address, and password (stored only as a secure hash).
- Profile photo, if you upload one.
- If you sign in with Google, GitHub, or LinkedIn: your account identifier, name, email, and avatar from that provider. We never receive your password for those services.
- Notification preferences.
Security and session data:
- Active sessions, including IP address and browser user-agent, so you can review and sign out devices.
- Rate-limiting counters keyed by IP address or account to prevent abuse.
Waitlist and newsletter: your email, browser type, and the page you signed up from.
Billing (paid plans): plan, billing period, invoices, and payment status. Card details are entered on and stored by our payment processor — we never see or store full card numbers.
Website analytics: anonymous events (for example, page views and button clicks) only if you allow analytics cookies. Events never contain your name, email, or anything you type.
The browser extension
The extension keeps your memories, projects, notes, planner, workflows, settings, and AI usage readings in your browser's local storage. They are not uploaded to our servers.
- It reads a web page only when you use a feature on it (for example, Save, Export chat, or Send page to AI).
- On AI chat sites it reads your draft only to count words locally, and the conversation only when you export it.
- The usage monitor reads only the provider's own Usage view, while it is open.
- It never reads passwords, cookies, or session tokens, and never submits prompts on your behalf.
How we use data
- To provide and secure your account (contract).
- To send transactional email such as verification, password reset, and security alerts (contract and legitimate interest).
- To send product updates if you opt in (consent — you can turn this off in Settings → Notifications).
- To process payments and keep tax records (contract and legal obligation).
- To understand how the website is used, only with your consent.
- To prevent fraud and abuse (legitimate interest).
We do not sell your personal data, and we do not use your saved content to train AI models.
Third-party sub-processors
| Provider | Purpose | Data |
|---|---|---|
| Database and application hosting | Running the web app and storing account data | Account, session, billing records |
| Amazon Web Services (S3) | Storing profile photos and site media | Uploaded images |
| Amazon Web Services (SES) | Sending transactional and opted-in email | Email address, message content |
| Upstash | Rate limiting | IP address or account ID counters |
| Google, GitHub, LinkedIn | Optional sign-in | Identifier, name, email, avatar |
| Payment processor | Subscriptions and payments | Billing details, payment status |
| Analytics provider (if enabled) | Website usage statistics, with consent | Anonymous events |
Each provider processes data only on our instructions and under a data processing agreement. Some providers process data outside your country; where required we rely on standard contractual clauses or equivalent safeguards.
How long we keep data
- Account data: while your account is open. After you delete your account, we erase it within 30 days, and from backups within a further 30 days.
- Sessions: until they expire or you sign out.
- Security logs: up to 90 days.
- Billing records: as long as tax and accounting law requires (typically 7–10 years).
- Waitlist entries: until you unsubscribe or we launch and contact you.
- Extension data: on your device until you delete it or uninstall the extension.
Your rights
Depending on where you live (for example, under the GDPR, UK GDPR, CCPA, or India's DPDP Act), you can:
- Access the personal data we hold about you and get a copy (export).
- Correct inaccurate data — most of it directly in Settings.
- Delete your account and data.
- Object to or restrict certain processing, and withdraw consent at any time.
- Port your data to another service.
- Complain to your local data protection authority.
To make a request, email support@dailyai.work from your account's email address. We respond within 30 days. Extension data can be exported or cleared from within the extension.
Security
We use encryption in transit (HTTPS), hashed passwords, database-backed sessions you can revoke, rate limiting, and least-privilege access. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.
Children
DailyAi.Work is not intended for anyone under 16. We do not knowingly collect their data; contact us if you believe we have.
Changes to this policy
We will post changes here and update the date above. For significant changes we will notify you by email or in the app before they take effect.