Privacy notice

1. Who handles your information

White Birch Ventures LLC operates Dayline. This notice covers our website, accounts, support, and service. When a caterer uses Dayline to store client information or send a proposal, invoice, or message, we process that business content to provide the service on the caterer's instructions. The caterer determines its own client relationships and is responsible for its own privacy notices. Contact the caterer about its use of your information, or contact us for help identifying or forwarding a request.

2. Information we collect

Account information includes your name, email address, password hash (not a readable password), verification and session records, business details, and records of policy acceptance. Business content includes quotes, costs, event details, client contact information, correspondence, document versions, acceptance records, and payment records you or your clients provide.

Billing information includes Stripe customer and subscription identifiers, plan status, billing dates, and transaction references. Card entry takes place through Stripe; we do not store full card numbers or card security codes. Connected payment features, when enabled, also receive relevant connected-account and invoice, payment, refund, dispute, and status information.

Technical and support information can include IP address, browser/device information, request and security logs, timestamps, email delivery events, and information you send to support. Cloudflare Turnstile processes browser and network signals to help distinguish people from automated abuse. Do not send us passwords, full card numbers, government identifiers, or unnecessary sensitive information. Use only the minimum dietary or allergy details needed for your work; Dayline is not designed to store medical records or protected health information.

3. How we use information

We use information to authenticate users, provide and secure workspaces, create and deliver documents, process subscriptions, carry out authorized payment integrations, troubleshoot, provide support, enforce our terms, maintain records, prevent fraud and abuse, and comply with legal obligations. We do not sell or rent personal information, share it for cross-context behavioral advertising, or use customer content to train general-purpose AI models.

We send account verification, password reset, service, and billing communications needed to operate your account. Client correspondence is sent at the business user's direction. Marketing, if offered separately, will have an opt-out and will not be bundled into required signup acceptance.

4. Service providers and other disclosures

Our providers include Vercel (application hosting and technical logs), Neon (database and recovery), Resend (transactional email), Stripe (subscriptions and connected payments), Cloudflare (Turnstile abuse protection), Microsoft 365 (support email), and UptimeRobot (availability monitoring). They receive information relevant to their functions; not every provider receives workspace content. Stripe and other providers may also process information under their own privacy notices for their independent legal, security, and operational purposes.

We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights or safety, investigate abuse, or complete a business transfer subject to appropriate protections and notice where required. We do not make your workspace public. People holding customer document links can see the linked client-facing information. Your internal cost data is not intentionally included in those customer documents.

5. Cookies and international processing

We use cookies and similar storage for authentication, session security, private-preview access, and essential preferences or abuse protection. Our current service does not use advertising cookies. Blocking essential cookies may prevent sign-in or security checks. Cloudflare and Stripe may use their own technologies when you interact with them.

Dayline is offered to US businesses. Our providers may process information in the United States and other countries where they operate; we do not promise US-only storage or processing. This notice does not represent that Dayline has been configured for every country's regulatory requirements.

6. Retention, cancellation, and deletion

Canceling a subscription stops renewal but does not delete your account or business records. We retain records while your account remains open, including after paid access expires so you can view and export them. Request account closure or deletion at support@whitebirchhq.com from your account email. We verify authority before releasing or deleting information and explain any limitations. We aim to respond within 30 days, or sooner where law requires; complex requests may take longer with notice where permitted.

After an approved closure request, we remove or deidentify account and workspace information that is no longer needed. Some information may be retained to comply with law, document billing and acceptance, prevent fraud, resolve disputes, or enforce agreements; access is limited to those purposes. Recovery copies can persist until their scheduled rotation and are not used for ordinary access. We maintain a seven-day production recovery window; provider logs, billing records, support messages, and lawful retention exceptions can follow different retention periods. If a backup is restored, approved deletion requests must be reapplied.

Deleting an individual quote does not necessarily remove already published correspondence, payment records, or audit history. Ask support if you need broader removal. Deleting Dayline data does not delete copies held by recipients, caterers, or independent payment providers.

7. Choices and rights

You can update business information in Settings, export supported workspace data there, and export document history separately. These exports are different: a workspace JSON backup is not a complete account archive. Contact support for help accessing, correcting, exporting, or deleting personal information, including information not covered by those exports.

Depending on applicable law, you may have rights to access, correct, delete, obtain a copy of information, or appeal a denied request. We will honor applicable rights, verify requests proportionately, and explain denials and appeal options. An authorized agent may contact us with evidence of authority. We do not retaliate for exercising privacy rights. Caterers should handle their clients' requests; we assist with information we process for them.

8. Security, children, and changes

We use access controls, encrypted connections, password hashing, security checks, and backups to reduce risk. No service or transmission is perfectly secure. Report a suspected security issue privately to support@whitebirchhq.com; do not access another user's information while investigating. We will provide incident notices as required by applicable law.

Dayline accounts are for adults aged 18 or older. We do not knowingly solicit accounts from children. If a child has supplied account information, contact us so we can address it. We will update the effective date when this notice changes and provide additional notice of material changes. We will obtain consent when legally required before using previously collected information in a materially different way.