Privacy Policy
This policy explains what DayRate collects, why, and the choices you have. We keep collection minimal and never sell your data.
Last updated
What we collect
Account details you provide (such as your email), the business data you enter (Gigs, clients, invoices), and product analytics that may associate your verified account email and approximate IP-derived country, region, and city with your account. Analytics never include the contents of your invoices or client records.
How we use it
To run the product, keep your account secure, and understand which parts of DayRate help freelancers so we can improve them. We do not use your business data to build advertising profiles.
Analytics and cookies
We use first-party product analytics processed by PostHog by default. This includes persistent anonymous identity, page visits and exits, attribution, web performance, errors, and deliberate product actions. Session replay and broad page-element autocapture are disabled, and analytics never include what you type, invoice contents, client details, rates, payment instructions, or sensitive URLs. For signed-in use, we use your stable internal account ID, verified email, and approximate location derived from your current IP address so we can understand usage and support early accounts; IP location can be inaccurate and is not an address. For marketing visits, approximate location is attached to the page-view event without creating a person profile. You can opt out at any time through Your Privacy Choices in the footer; opting out deletes the optional analytics and attribution identifiers and prevents their recreation.
Cookies we set
A PostHog cookie holds a random device identifier (a distinct_id — not your name, email, or anything you typed) for up to one year so repeat visits count as one person. After signup, DayRate links that anonymous journey to your stable internal account ID and may set your verified email on that account's analytics profile. The dr_attr cookie keeps first-touch source, campaign, referring domain, and landing path for up to 30 days. The dr_consent cookie records 'accepted' or 'declined' for up to 180 days; if no choice is recorded, first-party analytics remains on. The separate dr_advertising cookie records an advertising sale/share choice for up to one year. Authentication, security, billing, and preference cookies may also be strictly necessary to provide the service.
Sharing
We share data only with processors that run the service, or where law requires it. We never sell personal data. DayRate currently imports aggregate campaign performance from a connected Meta Ads account into PostHog; it does not currently send DayRate visitor or product events to Meta and no Meta advertising pixel is active. Any future conversion forwarding will use a separate advertising-purpose control, honor applicable opt-outs and Global Privacy Control signals, and exclude authenticated product activity and business-record data.
Your rights
You can access, correct, export, or delete your data. Use Your Privacy Choices / Do Not Sell or Share in the footer to manage analytics and advertising preferences without creating an account. A Global Privacy Control signal is treated as an opt-out of advertising sale or sharing. Contact privacy@getdayrate.com for other requests and we will respond within a reasonable period.