Privacy Policy

This Privacy Policy explains how Daylet collects, uses, shares, and protects personal information when you visit the Daylet website, use the Daylet dashboard, or book a stay through a Daylet booking page.

Who we are

Daylet is operated by Alexandre Rieux, a sole trader based in the United Kingdom. Under UK data protection law, Alexandre Rieux is the data controller for the personal information described in this policy, except where this policy explains that Daylet acts on behalf of a property owner.

Alexandre Rieux
Postal address: 28 Kelton HouseLondonW3 8TFUnited Kingdom
Email: info@dayletus.com

Property owners and their guests

When a guest books through a property owner's booking page or embedded calendar, the owner decides why and how the guest's booking details are used. For that information, the owner is the data controller and Daylet processes it on the owner's behalf as a data processor, under the data protection terms in the Terms of Service.

Guests who want to access, correct, or delete their booking details should contact the property owner first. Daylet will help the owner respond. Guests can also contact Daylet directly using the details at the end of this policy.

Information we collect

Depending on how you use Daylet, we collect:

Account details: your name, email address, and sign-in details, including your Google account name and email address if you sign in with Google
Property information: descriptions, photos, addresses, prices, and availability
Booking details: guest names, email addresses, phone numbers, postal addresses where the owner asks for them, booking dates, and messages
Payment information: subscription and booking payments are handled by Stripe. Daylet receives payment status and billing details but never sees full card numbers
Technical information: IP address, browser, and device information, used to run the service securely and to prevent abuse
Usage information: visits to booking pages and the steps reached in the booking form, so owners can see how guests use their page, and, only if you accept analytics cookies, how you use the Daylet website and dashboard
Support messages: emails you send to Daylet

How we use information and our lawful basis

UK data protection law requires a lawful basis for each use of personal information. Daylet relies on the following:

Providing your account, booking pages, bookings, and payments
Contract: we need this information to provide the service
Sending booking confirmations, account notices, and service emails
Contract
Keeping the service secure, preventing fraud and abuse, and fixing problems
Legitimate interests: keeping Daylet safe and working for everyone
Showing owners booking page statistics and improving Daylet
Legitimate interests: understanding how the service is used so it can be improved
Analytics cookies and session recordings on the Daylet website and dashboard
Consent, which you can withdraw at any time
Measuring Daylet's own ads on Facebook and Instagram (Meta Pixel and Conversions API)
Consent, which you can withdraw at any time
Sending product updates and tips to property owners
Legitimate interests. You can unsubscribe from these emails at any time
Keeping accounting and tax records, and responding to lawful requests
Legal obligation

Data Storage and Security

Your data is securely stored using Supabase (PostgreSQL database) with industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Service providers

Daylet uses the following providers to run the service. Each one processes personal information only to provide its service to Daylet:

Supabase: database, file storage, and sign-in
Vercel: website hosting, plus page statistics and performance measurement that do not use cookies (Vercel Web Analytics and Speed Insights)
Stripe: subscription and booking payments
Resend: email delivery
Mixpanel: product analytics and session recordings on the Daylet website and dashboard, only if you accept analytics cookies. Data is sent to Mixpanel's EU servers
Meta (Facebook and Instagram): measuring Daylet's own ads, only if you accept cookies. If you then sign up or upgrade to Pro, Daylet sends Meta your email address and an account identifier in hashed (scrambled) form, together with Meta's cookie identifiers, so Meta can report which ad brought you. For a Pro upgrade it also sends the amount paid and your browser's user agent
Mapbox: address search and maps
Upstash: rate limiting that protects the service from abuse
Google: optional sign-in with Google
OpenAI (ChatGPT) and Anthropic (Claude): optional AI assistant connections that you set up yourself through MCP

International transfers

Some of these providers are based in, or use servers in, countries outside the UK, including the United States. When personal information is transferred outside the UK, Daylet relies on the safeguards UK law allows, such as UK adequacy regulations (including the UK–US data bridge) or the International Data Transfer Addendum to the EU standard contractual clauses offered by the provider.

How long we keep information

Account and property information: for as long as your account is open. After you close your account, it is deleted or anonymised within a reasonable period, unless it must be kept for one of the reasons below
Booking details: for as long as the owner's account is open, so the owner can manage bookings and keep records
Payment, invoice, and accounting records: for as long as tax and accounting law requires
Analytics data: only as long as it is useful for understanding how Daylet is used, within the retention limits set in Mixpanel
Support emails: for as long as needed to deal with your request and any follow-up
Sign-up source (the campaign link you first arrived from, saved only if you accepted cookies): for as long as your account is open

AI assistants and MCP connections

If you choose to connect Daylet to an AI assistant through the Model Context Protocol (MCP), such as OpenAI’s ChatGPT or Anthropic’s Claude, the assistant can request information from your Daylet account to carry out your instructions. Depending on what you ask, this may include property details, availability, booking dates, prices, revenue figures, and guest names and contact details.

Daylet sends information only when the connected assistant makes an authorised request on your behalf. Daylet does not send your complete guest list to an AI assistant in the background and does not train an AI model on your booking data. The AI provider handles information it receives under its own terms, privacy policy, account settings, and data controls. You are responsible for making sure your use of an AI assistant is appropriate and lawful when guest personal data is involved.

You can stop future access by removing Daylet from the assistant’s connected apps or connector settings. Removing the connection does not delete information already included in conversations or retained by the AI provider; use that provider’s controls to manage or delete it. Do not use a connected assistant to access or disclose guest information unless it is necessary to manage the relevant booking.

Your rights

Under UK and EU data protection law, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Restrict how your data is used
Receive your data in a portable format
Object to processing based on legitimate interests
Withdraw consent at any time, without affecting earlier processing

To use any of these rights, email us using the details below. We will respond within one month.

Complaints

If you are unhappy with how Daylet handles your personal information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:

Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

If you live in the European Economic Area, you can also complain to the data protection authority in your country.

Cookies and similar technologies

Daylet uses four kinds of cookies and browser storage:

Essential cookies: keep you signed in, remember your language, and protect sign-in with Google. The service needs them to work, so they do not require consent
Booking page statistics: Daylet booking pages store a random visitor identifier in your browser so owners can see how many people reach each step of the booking form. It does not contain your name or contact details
Analytics cookies (Mixpanel): only set if you click Accept in the cookie banner on the Daylet website or dashboard. They help us understand how Daylet is used, including through session recordings. Mixpanel is never loaded on owners' booking pages or embedded calendars
Advertising cookies (Meta Pixel) and sign-up source: only set if you click Accept in the cookie banner. They let Daylet measure which of its own Facebook and Instagram ads bring people to Daylet, and remember the campaign link you first arrived from (for 90 days) so a sign-up can be matched to it. Neither is ever loaded on owners' booking pages or embedded calendars

You can change your cookie choice at any time.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last updated' date.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Alexandre Rieux
Postal address: 28 Kelton HouseLondonW3 8TFUnited Kingdom
Email: info@dayletus.com