This Privacy Policy explains how Datylux (“we”, “us”, or “our”) collects, uses, stores, and protects your information when you use our website and platform at datylux.com. By using Datylux, you agree to the practices described in this policy. If you do not agree, please do not use Datylux.
When you create an account, we collect your email address and, if you sign up via Google, your name and Google profile photo. This information is used solely to create and manage your account.
Data you explicitly choose to save within the app — including named campaign snapshots, budget pacing setups, campaign plans, and plan snapshots — is stored securely in our database (hosted by Supabase), associated with your account and protected by row-level security. Only you can access your saved data.
When you import CSV files into Datylux, that data is processed entirely in your browser. Raw CSV data is not transmitted to our servers and is not stored by us. When you close or refresh the tab, the imported data is cleared from memory. Only data you explicitly choose to save is persisted server-side.
When you use the Datylux AI feature, an aggregated summary of your campaign data (totals, percentages, platform names, and metric values — no individual-level rows or personally identifiable information) is sent to our server and forwarded to Anthropic’s Claude API. This data is not stored by us after the request completes. By using the AI feature, you consent to this processing. Anthropic’s privacy policy governs their handling of API requests.
With your consent, we use Google Analytics 4 to collect aggregated, pseudonymous usage data — such as page views, session duration, browser type, device type, country (city-level only), and which features you interact with. This information helps us improve the product. It is not linked to your name or email, is not sold, and is not used for advertising. You can opt out at any time via the Cookie preferences link in the footer; if you opt out, no Google Analytics cookies will be set on your device.
If you subscribe to a paid plan, payments are processed by Stripe. We do not store your credit card details. Stripe’s privacy policy governs the handling of your payment information.
We do not sell your personal information to third parties. We do not use your data for advertising purposes. Datylux does not serve ads.
If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:
Your account data is stored in Supabase, a managed cloud database platform with encryption at rest and in transit using industry-standard TLS. Access is enforced by row-level security policies — no other user or administrator can access your saved data through the application layer. Our serverless infrastructure is hosted on Netlify.
While we take reasonable and appropriate technical measures to protect your information, no system is completely secure. We encourage you to use a strong, unique password and keep your credentials confidential. If you suspect unauthorised access to your account, contact us immediately at support@datylux.com.
Datylux uses the following third-party services to operate the platform. Each acts as a data processor on our behalf:
We maintain Data Processing Agreements (DPAs) with each sub-processor that handles personal data on our behalf, where required by applicable law. We do not share your data with any other third parties except as required by law or as necessary to provide the service.
Datylux uses the following client-side storage. For a complete cookie list, see our Cookie Policy. You can manage non-essential cookies via the Cookie preferences link.
_ga, _ga_*) for aggregated, pseudonymous usage statistics. Only set if you accept analytics cookies. Used only to improve the product, never for advertising.We do not use advertising cookies, retargeting pixels, or any cookies that track you across other websites. Datylux does not participate in any advertising networks.
We retain your account data for as long as your account remains active. If you delete your account, your personal data — including your email, saved campaigns, pacing setups, and plans — will be permanently deleted from our systems within 30 days, except where a longer retention period is required by applicable law (for example, financial records related to paid subscriptions). Anthropic does not retain your AI query data beyond the immediate request per their API data handling policy.
Depending on your location, you may have the following rights regarding your personal data:
You can exercise your access, deletion, and portability rights directly within the app:
Where processing is based on consent (such as analytics cookies and AI feature usage), you may withdraw consent at any time via the Cookie preferences link or by stopping use of the AI feature, without affecting the lawfulness of prior processing.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA:
To exercise these rights, use the in-app tools above or contact us at support@datylux.com. We may need to verify your identity before fulfilling certain requests by confirming the email address associated with your account.
If you are located in the United Kingdom or European Economic Area, you also have the right to lodge a complaint with your local supervisory authority (for example, the UK Information Commissioner’s Office at ico.org.uk) if you believe we have processed your personal data unlawfully.
Datylux is operated from the United States. If you access the platform from outside the United States, your data may be transferred to and processed in the United States or other countries where our sub-processors operate. We take appropriate steps to ensure such transfers comply with applicable data protection laws, including through standard contractual clauses where required.
Datylux is not directed at or intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at support@datylux.com.
Datylux displays analytics based on data you import. We make no representations about the accuracy or completeness of imported data or the calculations derived from it. You are solely responsible for ensuring that data you import is accurate. Datylux is not liable for any decisions made based on inaccurate, incomplete, or misinterpreted data.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new features. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email or by a notice within the platform. Continued use of Datylux after changes are posted constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at support@datylux.com.