Privacy notice
What personal information Dafater keeps, why, where, and for how long.
[TO CONFIRM] Draft. A lawyer has not reviewed this page, and it does not apply until it is published as final.
Who is responsible
Dafater decides why and how your personal information is used. Our legal name and address: [TO CONFIRM]. To reach us, see the contact page.
This website
This website sets no cookies, has no forms and runs no analytics. It is hosted on Cloudflare, which keeps its own technical logs of requests, including IP addresses, for its own period: [TO CONFIRM].
What we collect when you sign up
- Your email address, to sign you in and write to you
- Your name and preferred language
- Your company name and the address you choose for your system
- Your answers about your business, to review your request and build your system
- The names, email addresses, languages and roles of the staff you list
- A record of which terms and privacy notice you accepted, and when
- Technical records, such as sign-in counters and request logs, to keep the service safe
Where it is kept, and for how long
| What | Where | How long |
|---|---|---|
| Email address, sign-in sessions, name and language | Supabase, Ireland | Until you ask us to erase them |
| Your answers and staff details, while you are signing up | Supabase, Ireland | A draft you stop working on gets reminders after 7 and 30 days, and is erased after 90 days. A request that is rejected, withdrawn or failed: 30 days. A finished system: 30 days after we hand it over |
| Company name and system address | Supabase, Ireland | As long as you are a client |
| Which terms you accepted, and records of our decisions | Supabase, Ireland | Kept, and never changed |
| Sign-in counters, holding a scrambled code and never your address | Supabase, Ireland | 2 days |
| Request logs with IP addresses | Google Cloud, Frankfurt; Cloudflare | 30 days by default at Google Cloud. Cloudflare keeps its own period: [TO CONFIRM] |
Your system and your business data
The data you put in your system belongs to you. Each client has a separate database. Your system runs on servers at Hetzner in [TO CONFIRM]. Encrypted backups are stored with Cloudflare, in [TO CONFIRM], and how often they run and how long they are kept is [TO CONFIRM].
Who we share it with
We share information only with the companies that run the service for us:
| Company | What it does |
|---|---|
| Cloudflare | Hosts this website, protects sign-up from automated abuse, carries traffic to your system and stores backups |
| Supabase | Stores your sign-in details and sign-up information |
| Google Cloud | Runs the sign-up service |
| Hetzner | Runs the servers your system lives on |
| Resend | Sends our emails |
We do not sell your information. Any other company that receives it, including for WhatsApp messaging: [TO CONFIRM].
Emails we send
We email you your sign-in code, decisions on your request, reminders about an unfinished draft, notices of planned updates, and the link to your system when it is ready. Your system also sends password resets, invitations and its own notifications.
Your choices
You can ask us to correct or erase your personal information. You can withdraw your request at any time before your system is built. We cannot erase your data while a build or a decision on your request is pending, or while you have a live system; in those cases we tell you why.
How to make a request, and how long we take to answer: [TO CONFIRM].
Changes to this notice
Each version has a date, and we record which version you accepted. If this notice changes in a way that matters, we ask you to accept the new version.