01
Who is responsible
Dayshift Studio Inc., 2006 2nd Ave, Cold Lake, Alberta, T9M 1E2, Canada, is responsible for these services. Zach Moir is the Privacy Lead.
Send privacy questions or requests to privacy@dayshift.studio with “Privacy request” in the subject.
02
What we collect
Depending on how you work with us, this can include:
- contact, account, and authentication information;
- messages, instructions, files, voice transcripts, and feedback;
- business records you ask an agent to use or create;
- service, security, device, and error metadata; and
- campaign measurement data only after you choose “Allow measurement.”
We ask clients not to provide sensitive information unless it is genuinely needed for the agreed work.
03
Why we use it
We use personal information to provide the service you requested, operate and secure the system, respond to you, improve reliability, meet legal obligations, and—in limited cases—measure our own marketing with your choice. We will not reuse it for an unrelated purpose without a valid reason or a new consent.
04
AI and service providers
Dayshift uses service providers for hosting, databases, communications, analytics, and AI inference. Some processing may happen outside Canada, including in the United States, where the information can be subject to local law. Dayshift remains responsible for the providers it uses and limits what each provider receives to the job it performs.
AI output can be wrong. We use human review and product controls where a result could materially affect a person or business.
05
Guided Walks
A Guided Walk is an optional voice conversation used to turn a person's reactions into a brand brief. Before the microphone starts, the participant sees the audience, providers, retention, and quote rules and must agree.
- Dayshift does not intentionally retain raw microphone audio.
- OpenAI processes live voice and may retain abuse-monitoring data for up to 30 days unless verified zero-data-retention terms apply.
- The authoritative transcript and evidence stay in a Canadian Supabase region.
- A redacted live-session copy may be processed in the United States; it excludes transcript text, exact quotes, Telegram identity, and readback wording.
- Abandoned sessions are scheduled for deletion after 7 days. Evidence is scheduled for deletion 30 days after the final artifact is accepted. The accepted brief can remain as a business record.
- The final brief is intended for the named project collaborators. Exact participant quotes require a separate, explicit approval.
These controls are activation requirements, not claims that the Guided Walk is already live.
06
Retention and deletion
We keep information only as long as needed for its stated purpose, legal obligations, security, or a documented business record. Retention periods differ by system. A deletion request can be limited by legal, contractual, security, backup, or recordkeeping requirements; when that happens, we will explain the limit.
07
Your choices and rights
You may ask what personal information we hold about you, request access or correction, withdraw consent where consent is the basis for processing, or ask us to delete information. We will verify identity proportionately and respond within the time required by applicable law.
You can change website measurement at any time using “Privacy choices” in the footer. Necessary storage only remembers that choice.
08
Security, support, and incidents
We use access controls, encryption, separation between client environments, logging, and least-privilege operating practices. No system is perfectly secure. Support access is limited to the work needed to diagnose or operate the service and should be logged. We assess suspected incidents and notify affected people and regulators when the law requires it.
09
Updates and questions
When this policy becomes effective, material changes will be dated and communicated in a way appropriate to the change. For a privacy question or request, email privacy@dayshift.studio.