Privacy Policy

What we collect

When you create an account, we collect your name and email address. When you send newsletters, we store the content you create and basic delivery data (recipient emails, open events, click events, bounces, and spam complaints). We use Google OAuth for sign-in and do not store passwords.

How we use it

We use your data to operate Daystage: delivering your newsletters, showing you analytics, and sending transactional emails (password resets, delivery receipts). We do not sell your data.

Your newsletter content and your subscriber lists are never used for advertising. If you accept marketing cookies, we do share conversion events from our own marketing pages with Google and Meta, for example that a signup or an upgrade happened, so we can tell which of our ads worked. That is limited to your own visit to daystage.com and never includes your subscribers. Decline marketing and we send nothing.

Subscriber data

Email addresses you upload for your subscriber lists are stored securely and used only to deliver newsletters you send. Recipients can unsubscribe at any time via the unsubscribe link in every email.

We monitor delivery signals such as bounce rates and spam complaints across the platform to protect the deliverability of every sender and to detect misuse, including spam and phishing. If we determine an account is being used to send unsolicited or abusive content, we may retain the account's content and subscriber data beyond our normal retention period as needed to investigate, respond to the abuse, or comply with legal requirements, and we may delete or disable an abusive account's subscriber lists as part of that response.

Cookies

We ask before we set anything that is not essential. The first time you visit, a banner lets you accept or decline. You can change your mind at any point using the Cookie settings link at the bottom of every page.

There are three categories:

• Strictly necessary. Always on. A session cookie keeps you signed in, and a small cookie named ds_consent remembers the choice you made here. These cannot be switched off, because the site does not work without them.
• Analytics. Google Analytics and PostHog, so we can see which pages people use and where they get stuck. Nothing is set until you accept.
• Marketing. Google Ads and Meta, used to measure whether an ad led to a signup. This covers measurement we send from our own servers as well as from your browser. Nothing is set until you accept.

If your browser sends a Global Privacy Control signal, we treat that as declining marketing, and the option stays off.

If you are in the EU, UK, Switzerland, Norway, Iceland, or Liechtenstein, nothing beyond strictly necessary loads until you opt in. Everywhere else, analytics and marketing start on and stop as soon as you decline.

Data retention

Your account data is retained as long as your account is active. Deleted newsletters are permanently removed after 30 days. You can request full account deletion at any time by emailing team@daystage.com.

Third-party services

We use Amazon SES to deliver emails, Neon for database hosting, Vercel for application hosting, Stripe for payment processing, and Cloudflare R2 for file storage. Subject to your cookie choice, we also use Google (Analytics, Ads, and Tag Manager), Meta, and PostHog. Each service has its own privacy policy.

Contact

Questions about privacy? Email us at team@daystage.com.