Privacy policy.

1. Who we are and what this covers

This policy describes how Dayfaro handles personal information when you visit this website or use the Dayfaro workspace to create presentations, visual explanations, and narration.

Dayfaro operates dayfaro.com. During the private preview, contact the person who provided your workspace access about this policy or your personal information.

2. Information processed by the service

Account information includes your email address, account identifier, profile details you choose to provide, and authentication records. Passwords are stored as password hashes rather than readable passwords.

Workspace information includes your prompts, chat history, uploaded assets, brand kits, source records, generated presentations, narration scripts, audio, and preferences. Avoid submitting personal information that you do not have permission to use.

Service operation can produce technical records such as request times, error details, model usage, generation costs, and network information received by our hosting providers. We use these records to operate and troubleshoot the service.

3. Why we use this information

We process account and workspace information to authenticate you, save your work, retrieve sources, generate requested content, and respond to your instructions. Where European or UK data protection law applies, this processing is necessary to provide the service you request under our agreement with you.

We also process information for our legitimate interests in keeping the service secure, resolving faults, preventing misuse, and responding to support requests. We assess those interests against your rights. Where a specific activity requires consent, we will request it separately; you can withdraw it without affecting earlier lawful processing. We may retain or disclose information when a legal obligation requires it.

4. AI services and other providers

Generating a presentation can send relevant prompts, conversation context, images, or narration text to external services. The current integration supports OpenAI for AI and speech, OpenRouter and its selected model providers for generation, and Exa for web search. The providers used depend on the feature and model selected. A search query may include words from your request.

When generation tracing is configured, Langfuse may process prompts, model outputs, tool activity, session identifiers, and usage measurements so we can diagnose failures and understand generation performance. These records may include content from your workspace.

Hosting, database, and object storage providers process information to run the service. Provider retention and data handling depend on the service, model, and account configuration; this policy does not promise that every external provider has the same retention or training settings.

Dayfaro does not currently run an advertising network or sell account data as part of the service. Our application does not implement its own model-training pipeline. We may disclose information to comply with a valid legal requirement, protect rights and safety, or as part of a business transfer with the protections required by applicable law.

5. Browser storage

The app uses browser storage to keep your sign-in token and preferences, such as playback speed and workspace settings. Clearing that storage can sign you out or reset those choices. Signing out removes the current sign-in token from this browser.

If you allow analytics in the privacy banner, we use PostHog to measure page visits and improve the website. PostHog may store a browser identifier and receive page URLs and technical information. We do not enable this optional analytics until you opt in. You can change your choice using the Privacy settings link in the footer.

6. Retention and security

Workspace content is kept so you can reopen and edit it. Account records and operational records are retained while needed to provide the service, resolve issues, meet legal duties, or establish and defend legal claims. Retention is assessed by the kind of information, the purpose for keeping it, and applicable obligations.

Deleting an item from your workspace may not immediately remove copies from backups or provider systems. Any retained copies remain subject to the relevant retention obligations. Contact the operator for an account or personal-data deletion request.

We use access controls and password hashing to help protect accounts. No service can guarantee absolute security. Protect your credentials and only upload information appropriate for the services and model providers you select.

7. International processing

External providers may process information in countries other than your own, including the United States. Where European or UK law requires safeguards for international transfers, the operator must arrange an applicable transfer mechanism, such as an adequacy decision or approved contractual safeguards, before that processing. Deployment regions and provider agreements will be confirmed for the public service.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of your personal information, restrict processing, object to processing based on legitimate interests, and withdraw consent. You may also complain to your local data protection authority. We may need to verify your identity before acting on a request.

Residents of US states with applicable privacy laws may have additional rights, including rights concerning certain disclosures and appeals of decisions on privacy requests. We will handle requests under the law that applies to you and will not discriminate against you for exercising a protected right.

During the private preview, contact the person who provided your workspace access. A public privacy contact will be published before launch.

9. Age requirements and updates

The current preview is intended for adults aged 18 and over. It is not directed to children. If you believe a child has provided personal information, contact the operator so it can be investigated and addressed.

We may update this policy as the service develops. The revision date on this page identifies the latest version. We will provide additional notice of material changes where required.