1. Who controls your data
OWNTHEDAY is responsible for the processing described in this notice. Privacy questions and rights requests can be sent to [email protected].
2. Scope and roles
This notice covers public visitors, account holders, sponsor contacts, workspace members, claim purchasers, reporters, and support contacts. It does not govern a sponsor’s destination site. Workspace customers may provide team information; depending on the feature and contract, we may act as their processor and provide a data processing addendum.
3. Data we collect
- Account: name, email, authentication provider identifiers, avatar, locale, timezone, accessibility and notification preferences.
- Workspace: organization name, members, roles, invitations, sponsor profiles, approval activity, and plan entitlements.
- Campaign: sponsor names, descriptions, destination URLs, public website metadata, retrieved logos and sharing images, generated fallback visuals, colors, moderation decisions, reports, and archived snapshots.
- Transaction: claim amount, currency, reservation, order and processor references, invoice status, refunds, disputes, tax information, and accepted disclosures. We do not store full card numbers.
- Usage: page and calendar impressions, sponsor-link clicks, shares, referral and UTM data, approximate device/browser information, timestamps, and bot-filtering signals. When live presence is enabled, a short-lived pseudonymous heartbeat records only a normalized route family, account class, and proxy-supplied country code; it never stores a raw IP address, city, GPS coordinate, account identity, URL slug, or query string.
- Security: session, IP and device signals, rate-limit events, audit logs, suspected abuse, and administrator actions.
- Communications: support messages, reports, complaints, survey responses, and transactional notification history.
4. Where data comes from
We receive data directly from you and workspace administrators, from interaction with the service, from Google authentication and Stripe payment events, from the public HTTPS destination you provide for a sponsor, from our own safety checks, and from public sources when investigating abuse or rights complaints. We do not purchase unrelated consumer profiles.
5. Why we process data
- Provide accounts, quotes, reservations, checkout, sponsor display, archives, analytics, workspaces, subscriptions, support, and notices—to perform a contract or take requested pre-contract steps.
- Retrieve and normalize a sponsor website's public logo, sharing image, and metadata, or generate a safe fallback, so the requested placement can be displayed.
- Measure aggregate country-level active audiences and route demand for real-time platform operations when live presence is enabled. “Active” means a heartbeat seen in the previous 90 seconds; administrators receive aggregate counts, never a visitor identity or individual activity trail.
- Verify payments, secure accounts, prevent simultaneous fulfillment, detect bots and fraud, moderate content, defend disputes, and improve reliability—our legitimate interests, balanced against user rights.
- Maintain tax, accounting, sanctions, consumer, and legal records and respond to authorities—to comply with legal obligations.
- Send optional marketing or use non-essential storage technologies—consent where required. Consent can be withdrawn without affecting prior processing.
- Establish, exercise, or defend legal claims and protect vital interests where applicable.
6. Data made public
Sponsor names, slugs, descriptions, retrieved or generated website visuals, destination links, claim amounts, dates, takeover history, verified status, and selected campaign metadata may be public. Public placement snapshots can persist in the archive after displacement or account closure. Do not publish private personal information through the sponsor profile or linked website metadata. Payment credentials, private identity data, email addresses, internal moderation notes, and raw security signals are not placed in public feeds.
8. International transfers
Providers may process data outside your country. Where required, international transfers rely on an applicable safeguard such as an adequacy decision or Standard Contractual Clauses. Information about applicable safeguards is available on request.
9. Retention
We keep account and workspace data while the account is active and for a short closure period; detailed campaign analytics for the plan’s published period; support and moderation records for the time needed to resolve issues; security logs for a risk-based period; and transaction, tax, dispute, and audit records for legally required limitation and accounting periods. Live-presence rows, when enabled, are scheduled for deletion once 24 hours old and are exposed to administrators only as aggregate country, audience-class, and route-family counts. Small groups are withheld from those breakdowns to reduce the risk of singling out a visitor. Public takeover history and sponsor-placement snapshots are designed to be permanent, subject to legal removal rights and safety action.
Data is deleted or irreversibly anonymized when no longer needed, unless preservation is required for legal claims, fraud prevention, or law.
11. Your choices and rights
Depending on location, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; opt out of certain sale/sharing or targeted advertising; appeal a refusal; and complain to a regulator. You can also manage notifications and some profile data in the dashboard. We may verify identity and retain information needed to document the request. Authorized agents must show authority. We will not discriminate for exercising a privacy right.
12. Security and automated decisions
Controls include restricted credentials, encryption in transit, secure cookies, role separation, controlled remote fetching, image validation and reprocessing, webhook verification, rate limits, audit events, backups, and administrator MFA. No system is perfectly secure; we maintain incident-response procedures and provide notifications where required by law.
Risk signals may automatically block or delay a reservation, login, destination link, or website visual. Where required, you may request review of an automated restriction by contacting [email protected]. We do not use personal data for automated credit decisions.
13. Children and changes
The service is not directed to children and purchasers must be at least 18. If we learn we collected a child’s personal data unlawfully, we will delete it. We will post changes with a new effective date and provide prominent notice or seek consent for material changes when required.
14. Contact and complaints
Contact us at [email protected]. You may also complain to the data-protection supervisory authority competent for your location.