Privacy Policy

Effective date: 20 August 2026

This Privacy Policy explains how Daycostra collects, uses, stores, and shares personal information when you access or use the Daycostra website, applications, AI-assisted software development tools, runtime services, APIs, subscriptions, and related services.

Daycostra is operated by [LEGAL OPERATOR NAME].

For privacy-related questions, contact:

[PRIVACY EMAIL]

1. Scope

This Privacy Policy applies to information processed through:

• daycostra.com
• Daycostra accounts
• project workspaces
• AI generation tools
• runtime environments
• subscription and billing functionality
• APIs
• support interactions
• integrations operated by Daycostra

It does not govern independent third-party websites or services that have their own privacy policies.

2. Information We Collect

Account Information

When you create or manage a Daycostra account, we may process information such as:

• name
• email address
• profile information
• account identifier
• authentication-provider identifier
• account settings
• organization or team membership

Authentication may be provided through third-party identity providers.

Project and Prompt Data

When you use Daycostra, we may process:

• prompts
• instructions
• source code
• uploaded files
• project names
• project configuration
• generated code
• build information
• project snapshots
• conversation history
• generated artifacts

This information is processed to provide the software-generation and project-management functionality you request.

Runtime and Technical Data

When Daycostra builds or executes projects, we may process:

• command execution events
• build output
• runtime logs
• errors
• stack traces
• dependency information
• process status
• runtime duration
• sandbox identifiers
• preview sessions
• network and performance diagnostics
• generated artifacts

This information helps operate, secure, debug, and improve the Service.

Usage Information

We may collect information about how the Service is used, including:

• pages and features accessed
• generation requests
• selected models
• project activity
• timestamps
• session activity
• feature interactions
• runtime consumption
• storage consumption
• API activity

AI Usage Information

For AI-assisted features, we may process information such as:

• model provider
• model selected
• input token counts
• cached input token counts
• output token counts
• reasoning usage where reported
• response latency
• provider errors
• generation cost
• repair attempts

This information may be used for service operation, billing, performance analysis, abuse prevention, and usage limits.

Device and Connection Information

We may automatically receive technical information such as:

• IP address
• browser type
• device type
• operating system
• language
• referring page
• timestamps
• request information
• security-related metadata

Payment and Subscription Information

If you purchase a Daycostra subscription, payment processing may be provided by Stripe.

Daycostra may receive information such as:

• Stripe customer identifier
• subscription identifier
• plan
• payment status
• invoice status
• billing period
• cancellation status
• limited billing metadata

Complete card information is processed by Stripe and is not intended to be stored directly by Daycostra.

Stripe processes payment information according to its own privacy policy.

Communications

If you contact us, we may process:

• your name
• email address
• message contents
• support requests
• troubleshooting information
• correspondence history

3. How We Use Information

We may use personal information to:

• provide Daycostra
• authenticate users
• create and manage accounts
• create and store projects
• process prompts
• generate software
• execute project builds
• operate runtime environments
• provide application previews
• maintain project history
• process subscriptions
• measure compute usage
• enforce plan limits
• provide customer support
• detect fraud and abuse
• maintain platform security
• diagnose technical problems
• monitor service reliability
• improve product performance
• comply with legal obligations

4. AI Processing

Daycostra may send relevant portions of prompts, code, project context, errors, or other requested input to third-party AI model providers.

Only information reasonably necessary for the requested AI operation should be provided to those services.

Different providers may be used depending on:

• model availability
• selected model
• functionality
• latency
• cost
• context requirements
• routing policies

AI providers operate under their own terms, data-processing arrangements, and privacy practices.

Daycostra should not be used to submit personal, confidential, regulated, or highly sensitive information unless you have the legal right and appropriate basis to process that information through the Service.

5. Runtime Processing

Generated or user-supplied code may be executed through isolated third-party or Daycostra-managed runtime environments.

To provide this functionality, relevant project files and runtime configuration may be transmitted to infrastructure providers.

Runtime providers may process technical information necessary to:

• create a sandbox
• install dependencies
• execute commands
• serve application previews
• monitor runtime health
• terminate runtime sessions

6. Legal Bases for Processing

Where the General Data Protection Regulation (“GDPR”), UK GDPR, or similar laws apply, Daycostra may process personal information under one or more of the following legal bases:

Contract

Processing necessary to provide the Service you requested, including:

• account operation
• project processing
• AI generation
• runtime execution
• subscription administration

Legitimate Interests

Processing necessary for legitimate interests such as:

• platform security
• fraud prevention
• service reliability
• debugging
• product improvement
• abuse prevention

where those interests are not overridden by your rights.

Consent

Where required, we may rely on your consent for specific processing activities.

You may withdraw consent where applicable.

Legal Obligation

We may process information when required to comply with applicable law, regulatory requirements, court orders, tax requirements, or lawful government requests.

7. How We Share Information

Daycostra does not sell personal information.

We may share information with service providers necessary to operate Daycostra.

These may include providers of:

• authentication
• payment processing
• AI models
• cloud infrastructure
• sandbox/runtime infrastructure
• databases
• storage
• monitoring
• analytics
• email
• customer support

Service providers receive only information reasonably necessary for their role.

8. Stripe

Daycostra uses or may use Stripe to provide payment and subscription services.

Stripe may independently collect:

• name
• billing information
• payment-card details
• transaction information
• fraud-prevention information
• device information

Daycostra generally receives payment status and subscription metadata rather than complete payment-card details.

Stripe's processing is governed by Stripe's own terms and privacy policy.

9. Authentication Providers

Daycostra may use third-party authentication providers to support:

• email authentication
• social login
• account sessions
• account security

If you choose a third-party login method such as Google or GitHub, the provider may share limited profile information necessary to establish your Daycostra account.

10. International Data Transfers

Some Daycostra service providers may process information outside your country or the European Economic Area.

Where required, Daycostra will use appropriate safeguards for international transfers, which may include:

• adequacy decisions
• Standard Contractual Clauses
• contractual data-protection commitments
• other lawful transfer mechanisms

11. Data Retention

Daycostra retains personal information only for as long as reasonably necessary for:

• providing the Service
• maintaining projects
• account administration
• subscription management
• security
• fraud prevention
• dispute resolution
• legal compliance

Different categories may have different retention periods.

For example:

• active project information may remain while your account/project exists
• deleted project data may remain temporarily in backups
• security logs may be retained for a limited period
• billing records may be retained where legally required

When information is no longer required, we may delete or anonymize it.

12. Project Deletion

Where supported, users may delete projects through Daycostra.

Deletion may remove active copies of project data while temporary copies remain within:

• backups
• logs
• disaster-recovery systems
• legally required records

Backup copies will expire according to applicable retention schedules.

13. Account Deletion

You may request deletion of your Daycostra account.

Before deletion, you should export any project information you wish to retain.

Some information may continue to be retained where necessary for:

• financial records
• legal obligations
• fraud prevention
• security
• dispute resolution
• enforcement of agreements

14. Cookies and Similar Technologies

Daycostra may use cookies or similar technologies necessary for:

• authentication
• session management
• security
• preferences
• service functionality

Where analytics, marketing, or other non-essential cookies are introduced, Daycostra will provide notices or consent controls where required by law.

15. Security

Daycostra uses reasonable technical and organizational measures intended to protect personal information.

These may include:

• encrypted transport
• access controls
• authentication
• authorization
• isolated runtime execution
• scoped credentials
• audit logging
• security monitoring
• infrastructure safeguards

No method of storage or transmission is completely secure.

Users are responsible for protecting their own credentials, project secrets, API keys, and deployed applications.

16. Your Privacy Rights

Depending on where you live, you may have rights including:

• access to personal information
• correction
• deletion
• restriction of processing
• objection to processing
• data portability
• withdrawal of consent
• complaint to a supervisory authority

Requests may be sent to:

[PRIVACY EMAIL]

We may need to verify your identity before completing certain requests.

17. European Economic Area and Norway

If you are located in Norway or the European Economic Area, applicable rights may arise under the GDPR and Norwegian data-protection law.

You may also have the right to lodge a complaint with your local supervisory authority.

In Norway, the relevant supervisory authority is Datatilsynet (Norwegian Data Protection Authority).

We encourage users to contact Daycostra first so that privacy concerns can be addressed directly where possible.

18. Children's Privacy

Daycostra is not intended for children who are below the minimum age required to independently consent to online services in their jurisdiction.

We do not knowingly seek to collect personal information from children in violation of applicable law.

If you believe a child has provided personal information improperly, contact us so that we can investigate and take appropriate action.

19. Automated Processing

Daycostra uses automated systems to:

• generate software
• route AI requests
• detect technical failures
• enforce compute limits
• identify suspicious activity
• manage runtime resources

These systems primarily support software-development functionality and platform operations.

Daycostra does not intend to use automated systems to make decisions that produce significant legal effects concerning users without appropriate safeguards where required by law.

20. Security and Abuse Prevention

We may process technical and account information to:

• detect unauthorized access
• detect malicious runtime activity
• investigate security incidents
• enforce usage restrictions
• prevent fraud
• protect Daycostra infrastructure and users

This may include retaining relevant security records even after an account or project has been deleted where reasonably necessary.

21. Business Transfers

If Daycostra is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction.

Where required, users will be informed of material changes affecting the handling of personal information.

22. Legal Disclosure

We may disclose information where reasonably necessary to:

• comply with applicable law
• respond to lawful legal process
• protect users
• investigate fraud or abuse
• enforce agreements
• defend legal rights
• protect Daycostra infrastructure

We will seek to limit disclosure to information reasonably necessary for the relevant purpose.

23. Changes to This Privacy Policy

We may update this Privacy Policy as Daycostra develops.

The latest version will be published with an updated effective date.

Where required by law, we will provide additional notice for material changes.

24. Contact

For privacy questions, rights requests, or concerns:

Daycostra
Operated by: [LEGAL OPERATOR NAME]
Address: [LEGAL/CONTACT ADDRESS]
Privacy email: [PRIVACY EMAIL]
Website: https://daycostra.com

For general support:

[SUPPORT EMAIL]