Privacy Policy

This Privacy Policy explains how Day3 ("Day3", "we", "us"), operated by Pradsgaard Labs, Bogfinkevej 2, 7400 Herning, Denmark, collects and processes personal data when you use our newsletter-sending service (the "Service").

1. Our role: controller vs. processor

For data about you, our customer (account, billing, and login information), Day3 is the data controller. For the subscriber data you upload and send to(your contacts' email addresses, names, and engagement), you are the controller and Day3 is your processor, processing that data only on your instructions and as described in these terms and this policy. A separate data processing agreement is available on request.

2. Data we collect

• Account data — name, email, organisation, and authentication handled by our auth provider (Clerk).
• Billing data — plan, subscription status, and payment metadata (we do not store full card numbers).
• Subscriber data — the contact lists you import (email, optional first/last name) and consent metadata (e.g. signup timestamp and IP for double-opt-in).
• Email engagement — deliveries, bounces, complaints, opens, and clicks, used to report campaign performance and protect deliverability.
• Technical data — logs, IP addresses, and diagnostic information needed to operate and secure the Service.

3. How we use data

• To provide, maintain, and secure the Service.
• To send the campaigns you create, to the recipients you choose.
• To protect sending reputation — e.g. suppressing addresses that hard-bounce or mark mail as spam, and pausing sending when complaint rates are too high.
• To handle billing and provide support.
• To comply with legal obligations.

4. Sub-processors

We rely on the following providers to deliver the Service:

• Clerk — authentication and organisation/billing management.
• Amazon Web Services (SES) — email delivery and sender identity verification.
• Supabase — managed Postgres database and file storage (region: Central EU (Frankfurt)).
• Vercel — application hosting.
• OpenRouter — optional AI drafting features (only invoked when you use them; email content you submit is processed to generate suggestions).
• Hostinger VPS, Central EU (Frankfurt) — background job queue.

A current list of sub-processors is available on request at connect@day3.app.

5. Cookies & tracking

Our app uses essential cookies only (for login/session). We do not use advertising cookies. Within the emails you send, Day3 can embed an open-tracking pixel and rewrite links for click tracking; you control whether these are enabled, and recipients can always unsubscribe via the link in every email.

6. Data retention

We retain account and subscriber data for as long as your account is active. Email engagement/event data is retained for 12 months, after which it is deleted or aggregated. When you delete a subscriber, or your account, we permanently erase the associated personal data — subscribers, campaigns, uploaded files, and account records — promptly, and in any case within 30 days. We retain only what we must to meet legal obligations, including a record of email addresses that have unsubscribed or reported a complaint, so that we continue to honor those opt-outs.

7. Your rights

Subject to applicable law (including the GDPR), you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact connect@day3.app. If you are a recipient of an email sent through Day3, please contact the sender (our customer), who is the controller of that data; we will assist them in responding.

8. International transfers & security

Data may be processed in regions where we or our sub-processors operate; where required, transfers are covered by appropriate safeguards (e.g. Standard Contractual Clauses). We apply technical and organisational measures to protect personal data, including encryption in transit and access controls.

9. Changes & contact

We may update this policy; material changes will be posted here with a new date. Questions or requests: connect@day3.app (or our postal address: Bogfinkevej 2, 7400 Herning, Denmark).