DayFilter is an email assistant that connects to your mailbox, sorts your mail, drafts replies and finds meeting times. It’s operated by SLIDEFACTORY LLC (“DayFilter”, “we”, “us”). This policy explains what we collect, why, who else handles it, how long we keep it, and the choices you have. It covers the DayFilter app at app.dayfilter.app and this website.
The short version: we only use your mail to run DayFilter for you. We don’t sell it, we don’t use it for advertising, and we don’t use it to train AI models.
What we collect
Your account
- Your name and email address.
- If you sign in with a password, a salted scrypt hash of it. We never store the password itself.
- If you sign in with Google, your Google account’s email address and name.
Your mailbox and mail
- Your mailbox address, its IMAP and SMTP server settings, and the app password you give us, encrypted with AES-256-GCM.
- A copy of the mail we sync: senders, recipients, subjects, dates, message bodies and folder positions, starting with the last 30 days when you connect.
- What DayFilter works out and does with that mail: categories, filter matches, reply drafts, proposed meeting times, and the moves, deletions and replies it queues or carries out.
- What you set up: filters, plain-English rules, sender rules, corrections you make, your signature, your writing-voice profile and the sample emails you pick for it, and your preferences.
Your calendar, if you connect one
To suggest meeting times, DayFilter reads when you’re busy and your calendar’s time zone from Google Calendar, Microsoft Outlook or a CalDAV calendar. It doesn’t read the titles, attendees or details of your events, and it doesn’t create or change events. We store the access tokens or CalDAV password needed for this, encrypted.
AI connections, if you add one
When you connect Claude, ChatGPT or another assistant, we store the permissions you choose, an access token for it (only as a SHA-256 hash), the mail it queues to send, and an activity log of each tool call it makes: which folder or mailbox, which message, recipients and subject, and why a call was refused. The log doesn’t include message bodies.
Technical data
A session cookie keeps you signed in. Our servers keep logs (such as request times, IP addresses and errors) to run and secure the service. We don’t use advertising or analytics trackers in the app or on this website.
The beta waitlist
If you join the waitlist, we keep your email address and when you signed up so we can send you a confirmation and, later, an invite.
How we use it
- To run DayFilter for you: sync and sort your mail, draft replies, find meeting times, carry out the actions you approve or set to run automatically, and let the AI assistants you connect do what you’ve allowed.
- To keep it secure and working: preventing abuse, enforcing send limits, fixing errors and keeping audit records.
- To talk to you about your account: sign-in and password emails, beta invites, notifications you’ve asked for, and important changes to the service.
We don’t sell your data, share it for advertising, or use your mail to train AI models, ours or anyone else’s. People at DayFilter don’t read your mail, except when you ask us to look at something, when it’s needed to investigate abuse or a security problem, or when the law requires it.
Who else handles your data
We use a small number of service providers. Each only gets what it needs to do its job for us.
- Anthropic (Claude API). We send message text to Anthropic to sort mail, draft replies, spot meeting requests, turn your plain-English rules into filters, suggest filters and learn your writing voice from the samples you pick. Under Anthropic’s commercial terms, API data isn’t used to train their models. See Anthropic’s commercial terms and privacy policy.
- Your mail provider. DayFilter reads and moves mail in your mailbox over IMAP and sends replies through your own SMTP server, under your provider’s terms.
- Google and Microsoft. Used for Google sign-in, and for calendar availability if you connect Google Calendar or Outlook.
- SendGrid (Twilio). Sends account emails such as password resets and beta invites.
- Hosting. Our servers and database are hosted by DigitalOcean.
- Google Fonts. This website loads its fonts from Google, which receives your IP address when the page loads.
AI assistants you connect, such as Claude or ChatGPT, are separate services. What they read through DayFilter is also handled under their own terms and privacy policies. We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of the business, in which case this policy would continue to apply to your data.
How Google user data is handled
DayFilter’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to sign you in and to find free times on your calendar. We don’t use it for advertising, don’t sell it, don’t let people read it except as described above, and don’t use it to train AI models.
How long we keep it
- We keep your synced mail, rules and activity while your account is open, so DayFilter can show history and restore what it moved.
- When you ask us to delete your account, we delete your account, mailbox credentials, synced mail and everything linked to them within 30 days. Backups that contain it are overwritten within a further 30 days.
- Revoking an AI connection or disconnecting a calendar ends its access straight away.
- We keep waitlist emails until you join, ask us to remove you, or we close the waitlist.
Deleting data in DayFilter doesn’t delete anything in your mailbox. Mail DayFilter moved to Trash stays there until you or your provider empty it.
How we protect it
Mailbox app passwords, calendar tokens and connector secrets are encrypted with AES-256-GCM. AI connection tokens and one-time links are stored only as hashes. Connections to the app use HTTPS. Send limits for AI connections are checked on our servers, and every tool call is logged. No system is perfectly secure, but if a breach affects your data we’ll tell you without undue delay.
Your choices and rights
You can change your filters, rules, voice profile and preferences, revoke AI connections and disconnect your calendar in the app at any time. Email hello@dayfilter.app to:
- get a copy of your data,
- correct it,
- delete your account and data,
- or object to or restrict how we use it.
We’ll reply within 30 days. Depending on where you live, you may have these rights by law, for example under the GDPR in the EU and UK or the CCPA in California, and you can complain to your local data protection authority. We don’t sell or share personal information as the CCPA defines those terms.
If you’re in the EU or UK, we rely on these legal bases: performing our contract with you (running the service), our legitimate interests (keeping it secure and improving it), and your consent where we ask for it, such as connecting a calendar or an AI assistant. You can withdraw consent at any time.
International transfers
We and our providers may process data in countries other than yours, including the United States. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses.
Children
DayFilter isn’t for anyone under 16, and we don’t knowingly collect data from children. If you think a child has given us data, email us and we’ll delete it.
Changes to this policy
We’ll update this page when what we do changes, and change the date at the top. If a change materially affects how we use your data, we’ll email you before it takes effect.
Contact
Questions or requests: hello@dayfilter.app. Postal address: SLIDEFACTORY LLC, 4520 SE Belmont St, Suite 300, Portland, OR 97215, USA.