Privacy notice

1. Who controls your data

The controller is [legal entity name, registration details, and address]. Privacy questions and rights requests can be sent to [email protected]. A representative or data protection officer will be identified here if legally required.

2. Scope and roles

This notice covers public visitors, account holders, sponsor contacts, workspace members, claim purchasers, reporters, and support contacts. It does not govern a sponsor’s destination site. Workspace customers may upload team information; depending on the feature and contract, we may act as their processor and provide a data processing addendum.

3. Data we collect

• Account: name, email, authentication provider identifiers, avatar, locale, timezone, accessibility and notification preferences.
• Workspace: organization name, members, roles, invitations, sponsor profiles, approval activity, and plan entitlements.
• Campaign: logos, images, messages, destination URLs, colors, creative versions, moderation decisions, reports, and archived snapshots.
• Transaction: claim amount, currency, reservation, order and processor references, invoice status, refunds, disputes, tax information, and accepted disclosures. We do not store full card numbers.
• Usage: page and calendar impressions, sponsor-link clicks, shares, referral and UTM data, approximate device/browser information, timestamps, and bot-filtering signals.
• Security: session, IP and device signals, rate-limit events, audit logs, suspected abuse, and administrator actions.
• Communications: support messages, reports, complaints, survey responses, and transactional notification history.

4. Where data comes from

We receive data directly from you and workspace administrators, from interaction with the service, from Google authentication and Stripe payment events, from our own safety checks, and from public sources when investigating abuse or rights complaints. We do not purchase unrelated consumer profiles.

5. Why we process data

• Provide accounts, quotes, reservations, checkout, creative display, archives, analytics, workspaces, subscriptions, support, and notices—to perform a contract or take requested pre-contract steps.
• Verify payments, secure accounts, prevent simultaneous fulfillment, detect bots and fraud, moderate content, defend disputes, and improve reliability—our legitimate interests, balanced against user rights.
• Maintain tax, accounting, sanctions, consumer, and legal records and respond to authorities—to comply with legal obligations.
• Send optional marketing or use non-essential storage technologies—consent where required. Consent can be withdrawn without affecting prior processing.
• Establish, exercise, or defend legal claims and protect vital interests where applicable.

A jurisdiction-specific lawful-basis table and legitimate-interest assessment must be completed before launch.

6. Data made public

Approved sponsor names, slugs, creatives, messages, destination links, claim amounts, dates, takeover history, verified status, and selected campaign metadata may be public. Public creative snapshots can persist in the archive after displacement or account closure. Do not submit private personal information as Sponsor Content. Payment credentials, private identity data, email addresses, internal moderation notes, and raw security signals are not placed in public feeds.

7. Service providers and disclosure

We disclose only what is needed to the providers used at launch: Hetzner and Coolify for the application server and persistent image volume; Convex for the hosted application database; Cloudflare for DNS, proxy security, TLS, and incoming support-mail routing; Google for authentication; Stripe for checkout, subscriptions, receipts, refunds, disputes, and its customer portal; and professional advisers where needed. OWNTHEDAY does not use a separate application email sender, object store, external analytics SDK, chat widget, or remote content-scanning service at launch. Provider purposes, legal entities, processing locations, retention, and links must be confirmed after the production accounts and launch countries are selected.

We may disclose data to workspace administrators, at your direction, during a corporate transaction subject to safeguards, to protect rights and safety, or where lawfully compelled. We do not sell personal data. Any “sharing” for cross-context behavioral advertising under regional law must be separately disclosed and opt-out enabled; none is intended at launch.

8. International transfers

Providers may process data outside your country. Before launch, we will document hosting regions and use an approved transfer mechanism such as adequacy decisions, Standard Contractual Clauses with a transfer assessment, or another lawful safeguard. Copies or summaries will be available on request where required.

9. Retention

We keep account and workspace data while the account is active and for a short closure period; detailed campaign analytics for the plan’s published period; support and moderation records for the time needed to resolve issues; security logs for a risk-based period; and transaction, tax, dispute, and audit records for legally required limitation and accounting periods. Public takeover history and approved creative snapshots are designed to be permanent, subject to legal removal rights and safety action.

A country-specific retention schedule with fixed periods must be approved before launch. Data is deleted or irreversibly anonymized when no longer needed, unless preservation is required for legal claims, fraud prevention, or law.

10. Cookies and similar technologies

Strictly necessary cookies support authentication, security, checkout state, preferences, and load balancing. Optional analytics or marketing technologies will remain disabled until valid consent where required. A consent panel will describe each category, provider, purpose, and duration and allow withdrawal as easily as acceptance. Server logs and privacy-preserving measurement are also covered by this notice.

11. Your choices and rights

Depending on location, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; opt out of certain sale/sharing or targeted advertising; appeal a refusal; and complain to a regulator. You can also manage notifications and some profile data in the dashboard. We may verify identity and retain information needed to document the request. Authorized agents must show authority. We will not discriminate for exercising a privacy right.

12. Security and automated decisions

Controls include restricted credentials, encryption in transit, secure cookies, role separation, authorized upload access, image reprocessing, webhook verification, rate limits, audit events, backups, and administrator MFA. No system is perfectly secure; incident response and legally required notification procedures will be maintained.

Risk signals may automatically block or delay a reservation, login, link, or creative. Decisions with significant effect should offer meaningful review and an appeal where required. We do not use personal data for automated credit decisions.

13. Children and changes

The service is not directed to children and purchasers must be at least 18. If we learn we collected a child’s personal data unlawfully, we will delete it. We will post changes with a new effective date and provide prominent notice or seek consent for material changes when required.

14. Contact and complaints

Contact [email protected] or write to [counsel-approved postal address]. Users in the EEA/UK may also complain to their competent supervisory authority; other regional regulator and appeal details will be added for enabled launch markets.