Daysi Privacy Policy

Daysi ("Daysi", "we", "us", or "our") respects your privacy and is committed to protecting personal data.

This Privacy Policy explains how we collect, use, and protect personal information when you use the Daysi platform, our website, and related services (the "Service").

Daysi is operated by Rdentify Ltd, which acts as the data controller for personal data collected through our website and platform.

If you have questions about this policy, you can contact us at: support@daysi.ai

1. Information We Collect

Information You Provide

When you create an account or use the Service, we may collect:

• name
• email address
• company name
• billing information
• account credentials
• communication with our support team.

Customer Conversation Data

When businesses deploy a Daysi chatbot, the platform may process conversation data between the business and its customers. This may include:

• questions submitted by end users
• chatbot responses
• conversation transcripts
• feedback or ratings.

Businesses using Daysi control the content of these conversations. In this context:

• the business using Daysi is the data controller
• Daysi acts as a data processor on their behalf.

Usage Data

We may collect technical information about how the Service is used, including:

• IP address
• device type
• browser type
• usage activity within the platform
• timestamps and interaction logs.

This information helps us improve the Service and maintain security.

Cookies and Website Analytics

Our website may use cookies and similar technologies to understand website usage, improve performance, and remember user preferences. More details are available in our Cookie Policy.

2. How We Use Information

We use personal information to:

• provide and operate the Service
• manage accounts and subscriptions
• process payments
• provide customer support
• improve the platform
• analyse platform usage and performance
• maintain platform security.

3. AI and Conversation Analysis

Daysi uses artificial intelligence to analyse conversations and generate insights. These insights may include:

• sentiment analysis
• frequently asked questions
• knowledge gaps
• conversation summaries.

Conversation data may also be analysed in anonymised and aggregated form to improve the Service and develop new features. This aggregated data does not identify individual users or businesses.

4. Legal Basis for Processing

Under GDPR, we process personal data based on the following legal bases:

• Contractual necessity: Processing is necessary to provide the Service to customers.
• Legitimate interests: We process certain data to improve the platform, prevent fraud, and maintain security.
• Legal obligations: In some cases we may process data to comply with legal requirements.

5. Sharing of Information

We do not sell personal data.

We may share information with trusted service providers that help operate the platform, such as:

• hosting providers
• payment processors
• analytics tools
• advertising and conversion measurement platforms (Meta/Facebook, Google, LinkedIn)
• customer support tools.

These providers process data only as necessary to deliver their services.

6. Advertising, Conversion Tracking and Server-Side Event Sharing

Where you have accepted marketing cookies via our cookie banner, Daysi uses both browser-based pixels and server-side conversion APIs (including the Meta Conversions API, also known as CAPI) to measure the effectiveness of our advertising campaigns.

To attribute conversions to the correct advertising campaign, we collect and transmit the following categories of personal data to Meta (Facebook) at the point a conversion event occurs, such as when you register an account ("lead") or purchase a subscription ("purchase"):

• IP address (client_ip_address) captured from your request headers.
• Browser user agent (client_user_agent) captured from your request headers.
• _fbp cookie (Facebook Browser ID) set by Meta's pixel in your browser.
• _fbc cookie (Facebook Click ID) set when you arrive from a Meta ad, or derived from the fbclid URL parameter.
• The referring URL (event_source_url) so the server event can be de-duplicated against the corresponding browser pixel event.

We recognise that, under UK and EU GDPR, IP addresses, user agents and advertising cookies such as _fbp and _fbc are personal data because they can be used to identify or fingerprint an individual device. We therefore process this data on the basis of your consent (given via our cookie banner), and only for the specific purpose of attributing advertising conversions and preventing ad fraud.

Data minimisation and short-term storage: the raw IP address, user agent, _fbp and _fbc values are stored only temporarily so that we can send the conversion event to Meta, and retry if the initial dispatch fails. Once the event has been processed, and in any case no later than 14 days after collection, these fields are automatically and permanently redacted from our database by a scheduled cleanup job. Anonymous, aggregate metadata (such as UTM parameters and signup dates) may be retained for longer-term analytics reporting.

You can withdraw consent at any time by rejecting cookies via the cookie banner, clearing the daysi_cookie_consent cookie, or contacting us at support@daysi.ai. Withdrawing consent stops future collection but does not affect processing that has already taken place.

7. Data Storage and Security

Daysi uses industry-standard security practices to protect information processed through the Service. These measures may include:

• encryption in transit
• access controls
• infrastructure security monitoring.

However, no internet-based service can guarantee absolute security.

8. Data Retention

We retain personal data only for as long as necessary to provide the Service and comply with legal obligations.

Conversation data may be stored for a limited period to support analytics and platform functionality.

Advertising attribution data used for server-side conversion tracking (IP address, user agent, _fbp and _fbc cookie values) is automatically redacted no later than 14 days after collection, as described in Section 6.

Customers are responsible for exporting any data they wish to retain before cancelling their account.

9. International Data Transfers

Daysi may process data using infrastructure or service providers located in different countries.

Where personal data is transferred outside the UK or European Economic Area, appropriate safeguards are used to protect that data.

10. Your Data Protection Rights

Depending on your location, you may have rights under data protection law including:

• the right to access personal data
• the right to request correction of inaccurate data
• the right to request deletion of personal data
• the right to restrict processing
• the right to object to certain processing.

11. Data Processed on Behalf of Customers

When Daysi processes conversation data for businesses using the platform, those businesses act as the data controller.

If you are an end user interacting with a chatbot powered by Daysi, you should contact the business operating that chatbot regarding your personal data.

12. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When updates occur, the "Last Updated" date will be revised.

Continued use of the Service after changes indicates acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or how personal data is handled, please contact: support@daysi.ai