Privacy Policy

Last updated: October 24, 2026

The short version

  • We never sell your data or your contacts’ data, and we don’t show ads or use advertising trackers.
  • Your leads belong to you. Each business’s data is walled off from every other business. Inside a team, the owner sees every rep’s leads, and a rep sees only their own.
  • Nothing is sent without you. DayForge only sends an email when you tap Send, from your own Gmail. It never texts or calls on its own.
  • We read only what we need. Card photos are read by AI and not kept. From your Gmail we read a handful of your sent emails to learn your writing style, and never your inbox.

1. Who we are and what this covers

DayForge (“DayForge,” “we,” “us”) provides the DayForge app at app.getdayforge.com and the website at getdayforge.com (together, the “Service”). This policy explains what we collect, why, who we share it with, how long we keep it, and your choices.

DayForge is a business tool. A business (“owner”) subscribes and may invite salespeople (“reps”). The contacts you add to DayForge belong to your business. For that information, your business decides what is collected and why, and we process it on your behalf to provide the Service.

2. Information we collect

  • Account details: your name, email address, and sign-in information, handled by our login provider Clerk. We never see your DayForge password.
  • Business profile: business name, what you sell, who you sell to, why customers choose you, where you work, and what your follow-ups ask for, plus each person’s name and phone number for message sign-offs.
  • Your leads and activity: contacts you scan or type in (name, title, company, phone, email, website, address), how you met, notes, activity log, stage, follow-up dates, deal values, closing prices, and drafted messages.
  • Business card photos: your phone shrinks the photo, then it’s sent to our server and to our AI provider to read the card. We do not save the photo. Only the contact details read from it are kept.
  • Gmail connection: your Gmail address and the Google “app password” you create for DayForge. The app password is encrypted (AES-256) before it is stored and is never shown again or sent back to your device.
  • Your writing style: emails you paste into Settings, drafts you edit before sending, and when you connect Gmail, the text of up to six of your recent sent emails (see section 4). We use these only to make your own drafts sound like you.
  • Billing records: your Stripe customer and subscription IDs, subscription status, and number of seats. Card and bank details go directly to Stripe. We never receive or store them.
  • Usage and technical data: a daily count of AI scans and drafts per person (to enforce fair-use limits), and standard server logs from our hosting provider (such as IP address, browser type, and request time), kept briefly for security and troubleshooting.

3. How we use it

Only to run the Service for you: reading cards, writing follow-ups in your voice, sending the emails you choose to send, keeping your Today list and sales totals, managing your team and subscription, keeping the Service secure, enforcing limits, and answering your support requests.

We do not sell or rent personal information, use it for advertising, or share it with data brokers. We do not use one business’s data to serve another business. We do not use your data to train AI models, and our AI provider does not use data sent through its commercial API to train its models.

4. Your Gmail

  • What we access: we connect to your Gmail with the app password you create. We use it to (1) send the emails you tap Send on, from your address, so they appear in your Sent folder, and (2) once, when you connect, look through your most recent sent emails (about the last 40) and keep the text of up to six of them, skipping short notes and removing quoted replies, to learn your writing style.
  • What we don’t do: we don’t read your inbox, delete or change messages, send anything you didn’t tap Send on, or share your email content with anyone except our AI provider to write your drafts.
  • Turning it off: disconnect in Settings at any time. That deletes the stored app password and the writing samples taken from your Gmail. You can also revoke the app password from your Google Account.

5. Texts and calls

The Text and Call buttons open your phone’s own messaging and phone apps. DayForge does not send texts or place calls itself, and does not see or record them. We only log that you tapped them, so your follow-up schedule stays accurate.

6. Who we share it with

We use these service providers, and each receives only what it needs to do its job:

  • Clerk (sign-in): your name, email, and sign-in details; also sends team invitation emails.
  • Supabase (database): stores your account, business profile, leads, writing samples, and encrypted Gmail credential.
  • Vercel (hosting): runs the app and website and keeps short-term server logs.
  • Anthropic (AI): receives card photos, lead details, notes, your business profile, and writing samples, to read cards and write drafts.
  • Stripe (payments): processes your subscription. Stripe acts as the seller of record and calculates and collects sales tax, under Stripe’s own privacy policy.
  • Google (your Gmail): emails you send go through your own Gmail account, under Google’s privacy policy.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of the business, in which case this policy would continue to apply.

7. Who can see what inside a team

The owner of a business account can see every lead, activity log, and sales total for their whole team. Each rep sees only the leads they added themselves. A rep’s Gmail connection and writing samples are private to that rep. No one outside your business can see your data.

8. Cookies and storage on your device

We use only the cookies needed to keep you signed in (set by Clerk). The app stores one small preference on your device (whether you’ve seen the “install on your phone” screen). The installable app’s background script stores nothing. We do not use advertising cookies, cross-site trackers, or third-party analytics.

9. Security

Data is encrypted in transit (HTTPS). Your Gmail app password is additionally encrypted with a key kept only on our servers. Your browser never connects to our database directly: every request goes through our server, which checks who you are and which business and leads you’re allowed to see. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.

10. How long we keep it

We keep your data while your account is active. If you cancel, your data is kept for 30 days so you can come back or export it, and then it may be permanently deleted. You can ask us to delete it sooner. Card photos are never stored. Server logs are kept briefly by our hosting provider. Records we must keep for legal or tax reasons (such as billing history at Stripe) are kept as long as the law requires.

11. Your choices and rights

You can view and edit your information in the app, disconnect Gmail, delete leads, and cancel your subscription in Settings. Email us to get a copy of your data, correct it, or delete your account.

Depending on where you live (for example, California under the CCPA/CPRA, or the EU/UK under the GDPR), you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain uses. We do not sell or “share” personal information for cross-context advertising. We won’t treat you differently for exercising your rights. If you are a contact someone added to DayForge, you can contact us, and we’ll work with the business that added you.

12. Where data is processed

DayForge and its providers are based in the United States, and your information is stored and processed there.

13. Children

DayForge is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

14. Changes

If we change this policy in a meaningful way, we’ll update the date above and let account owners know by email or in the app before the change takes effect.

15. Contact us

Questions or requests about privacy: dvwtree@gmail.com