Privacy Policy

1. Data controller

The data controller responsible for your personal data is Days Owners, contactable at info@daysowners.com.

2. Data we collect

We collect the following personal data:

• Account data: name, email address and password (stored encrypted).
• Optional profile data: profile photo, biography, personal URL, social media handles and country.
• Transaction data: purchase history, prices paid and dates. Payment data (card details) are managed exclusively by Stripe and are not stored by Days Owners.
• Usage data: pages visited, per-day visit counters and anonymous browsing data.
• Gift data: recipient name and email when you send a gift, and an optional personal message.

3. Purpose and legal basis for processing

4. Data retention

We retain your data for as long as you maintain an active account on Days Owners. If you request deletion of your account, your personal data will be erased within a maximum of 30 days, except for data we are legally required to retain (such as transaction records, which are kept for 5 years under Spanish tax regulations).

5. Data recipients

Your data may be shared with the following trusted third parties, only to the extent necessary to provide the service:

• Stripe: secure payment processing. Stripe's privacy policy.
• Resend: transactional email delivery.
• Supabase / Vercel: database infrastructure and hosting, with servers in the European Union.

We do not sell or share your data with third parties for commercial or advertising purposes.

6. Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: know what data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data ("right to be forgotten").
• Portability: receive your data in a structured, commonly used format.
• Restriction: request that processing be restricted in certain circumstances.
• Objection: object to processing based on legitimate interest.

To exercise any of these rights, write to us at info@daysowners.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.

7. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration: HTTPS encryption, hashed passwords, restricted database access and certified infrastructure providers.

8. Cookies

Days Owners only uses essential cookies required for the service to function (authenticated user session). We do not use tracking, advertising or third-party analytics cookies.

9. Changes to this policy

We may update this privacy policy periodically. We will notify you of any significant changes by email or via a notice on the platform. The last updated date appears at the top of this page.

10. Contact

For any privacy or data protection queries, contact us at info@daysowners.com or via our contact page.