Privacy Policy

In effect from September 2, 2026

What we collect, why, who else sees it, and how to delete it. We do not sell your data and we do not run ads.

01What we collect

What you type in, plus the basics of how you use the site.

  • Account: email address, password (stored hashed, never in readable form), and whether you signed up to work or to hire.
  • Profile: anything you add — name, role, city, rates, credits, gear, portfolio links, availability.
  • Private settings: your rate floor, matching preferences, and alert settings. These are never shown publicly.
  • Activity: jobs you save, pitches you send, bookings, and when you were last active.
  • Technical: normal server logs, including IP address, for security and debugging.

02What is public

Your profile is meant to be found — including by people who are not signed in.

Your name, role, location, listed rate, credits, gear, published vouches and portfolio are visible to anyone with the link, including search engines. That is the point of a directory. Your email address, rate floor, matching preferences, alert settings, saved jobs and private agreed rates are not public.

03Automated matching uses an AI provider

Job descriptions and parts of your profile are sent to Anthropic to score how well they fit.

To rank jobs against your profile we send job listings and relevant profile details to Anthropic’s API. This is processing on our behalf under their commercial terms; it is not used to train models. Scoring never sends your name, email, or phone number. When you ask us to read a resume into your profile, its text is sent, with phone numbers, email addresses, and tax ID numbers removed first; the same removal applies to anything you type into your profile summary. Your paperwork (tax forms, insurance certificates) is never sent. If you would rather not be scored, turn off matching in your alert settings, or ask us and we will disable it for your account.

Breaking a script down for set. When someone who runs a shoot chooses Break it down with AI, the text of the documents they picked (a script, a brief, interview questions, a schedule) is sent to Anthropic to turn into a shot list and cue card. The files are read in your browser; only their words are sent, and only when that button is pressed. The reader without AI never sends anything anywhere. As above, Anthropic doesn’t train on it.

04Who else handles your data

A short list of infrastructure providers. Nobody buys it from us, because we do not sell it.

We use these processors to run the service:

  • Supabase — database and sign-in
  • Vercel — hosting for the website
  • Fly.io — hosting for the background service
  • Resend — sending email notifications
  • Anthropic — automated job matching and, when asked, breaking scripts down for set (see above)

If you connect Slack, Microsoft Teams, Google, or YouTube, what you choose to send goes to them under their terms. We never sell personal data or share it for advertising.

Discord works the other way too. If a company’s owner or admin opens a Discord channel to Dayrate, the Dayrate app reads the messages in that channel and its threads from that moment on, and keeps them under the job they were opened to, where only the people working on that job can see them. It posts a notice in the channel when it starts, and again when it stops. Dayrate reads no other channel, and nothing written before the channel was opened. Edits and deletes in Discord carry over, and closing the channel deletes everything that was read.

Slack works the same way once a company adds the Dayrate app to its Slack workspace: only channels an owner or admin opens to a job are read, only from that moment, with a notice posted in the channel, and closing the channel (or removing the app from Slack) deletes what was read.

05Your Google account

Only if you connect it, only what you turn on, and never sold, shared for ads, or used to train AI.

You can connect your own Google account from Account and sign-in. Each part asks Google for permission separately, only when you turn it on:

  • Google Calendar (your dates): Dayrate adds your bookings, holds, days you blocked, and the days of your jobs to your calendar as all-day events, and changes or removes them when they change in Dayrate. It only edits events it created and does not read your other events.
  • Busy times: if you turn it on, Dayrate reads only whether you are busy or free for the next 120 days, never what your events are, and shows days with four or more busy hours as unavailable on Dayrate.
  • Gmail: if you turn it on and choose it when sending a call sheet, Dayrate sends that one message from your address. It never reads, lists, or deletes your mail.
  • YouTube: if you turn it on, a video you choose uploads from your computer to your channel, with the title, description, tags, and thumbnail you prepared. Dayrate does not change or delete your other videos.
  • YouTube numbers: if you turn it on, Dayrate reads the view, like, and comment counts of the videos you published or linked through Dayrate and shows them on your Channel board. It reads nothing else and can’t post, edit, or delete anything.
  • YouTube Analytics: if you turn it on, Dayrate reads your channel’s analytics (views, watch time, how much of each video people watch, subscribers gained and lost, and where viewers came from) when you open Channel → Analytics, and shows them to you there. It isn’t stored, and it’s read only.
  • Google Sheets: if you turn it on, a list you export becomes a new spreadsheet in your Drive. Dayrate can only open files it made, not the rest of your Drive.

The access Google gives us is stored encrypted and is used only to do the things above for you. We do not sell Google user data, use it for advertising, let people read it, or use it to train AI models. Disconnecting (Account and sign-in → Google → Disconnect) removes the events Dayrate made, deletes the busy days it read and cancels the access with Google; you can also remove Dayrate at myaccount.google.com/connections.

Dayrate’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Uploads to YouTube are also covered by the YouTube Terms of Service and Google’s Privacy Policy.

Frame.io: if you connect it with your Adobe sign-in, Dayrate reads the comments on a cut when you paste that cut’s Frame.io link, so they become notes in Dayrate. It reads nothing else, changes nothing in Frame.io, and keeps your Adobe access encrypted. Disconnect it any time from Connected apps.

Your Claude: if you connect Claude to Dayrate, Claude can see your own jobs, clients and job plans, and can send items to a plan. Nothing it sends is added until you tick it. It can’t see any company’s jobs, crew, money or paperwork. What you say to Claude is covered by Anthropic’s terms, not ours. End the connection any time from Connected apps.

06Notes other people keep about you

Companies can keep private notes about crew they have worked with, and you cannot see them by default.

A company’s private crew list may include a note about you that is visible to their team and not to you. We are telling you this plainly because you would not otherwise know it existed.

Depending on where you live you may have a legal right to request a copy of personal data held about you, including those notes. Write to us and we will handle the request as the law requires.

07Deleting your account

Account → Delete your account. The data and your files go with it.

Deleting your account (from the account menu, Account and sign-in) removes your login, profile, credits, gear, portfolio, saved jobs, matches, private settings, and every file you uploaded: resume, photos, and paperwork. Some records may persist briefly in encrypted backups before rotating out, and we may retain the minimum needed to meet a legal obligation or resolve a dispute.

If you shared paperwork with a company, that company keeps its log of when it was shared and opened (not the file) for up to two years, because it may need to show who saw what. Other logs are kept for at most 90 days.

Content genuinely belonging to someone else does not disappear with you: a vouch you wrote for another person, and a company’s own record that they booked someone, remain theirs.

08Your rights

Ask for a copy, a correction, or deletion — whichever you want.

You can ask us to give you a copy of your data, correct it, delete it, or stop a particular use of it. Email us and we will respond within the time the law allows. Depending on where you live you may also have the right to complain to a data protection authority.

09Cookies

Only the ones that keep you signed in and remember your settings.

We use cookies to keep you signed in, remember which company you are acting as, and remember your display preferences. We do not use advertising or cross-site tracking cookies.

10Security

Access is enforced by the database itself, not just by the website.

Data is encrypted in transit and at rest. Access rules are enforced in the database, so a mistake in the website cannot hand one person’s data to another. No system is perfectly secure, but if a breach affects you we will tell you as required by law.

11Under 18s

Dayrate is not for children and we do not knowingly collect their data.

The service is for people aged 18 and over. If we learn we have collected data from a child, we will delete it.

12Where your data is held

On servers in the United States.

If you are outside the United States, using Dayrate means your data is transferred there, where privacy laws may differ from your own.

Questions about any of this: support@itsdayrate.com