Privacy Policy

DayRate LIVE, LLC ("DayRate LIVE," "we," "us," or "our") operates the DayRate LIVE platform, accessible at dayrate.live. We are a California limited liability company.

This Privacy Policy explains how we collect, use, store, and share information about you when you use our platform. By using DayRate LIVE, you agree to the practices described in this policy.

Information you provide directly:

• Account information — name, email address, password (stored as a secure hash by Firebase Authentication)
• Profile information — role/instrument, tour name, business name, address, phone number
• Rate card data — day rates, per diem rates, payment preferences (Venmo, Zelle, PayPal, bank name)
• Invoice data — invoice details, line items, dates, amounts, client information, payment details (account and routing numbers stored on invoice documents only)
• Expense and receipt data — receipt images, merchant names, amounts, dates, categories
• Team data — team name, member roster, roles, invite emails
• Payment information — bank account details collected and stored by Stripe for DayRate PAY (we never see or store your full bank account or card numbers)

Information collected automatically:

• IP address — collected by our Netlify Functions when you use features like DayRate PAY, for fraud prevention purposes only
• Firebase usage data — Firebase automatically logs basic usage data such as authentication events. We do not use Google Analytics or any third-party analytics tools.

We do not use cookies for tracking, advertising, or analytics. Firebase Authentication uses a session cookie solely to keep you logged in.

We use the information we collect to:

• Create and maintain your account
• Provide the invoicing, receipt vault, team portal, and payment features
• Generate and send invoices and receipt PDFs on your behalf
• Process payments through DayRate PAY via Stripe
• Send transactional emails — invoices, password resets, team invitations, and payment notifications
• Provide Smart Scan receipt extraction via Anthropic's Claude API
• Detect and prevent fraud and abuse
• Respond to your support requests
• Comply with legal obligations

We do not send marketing emails. We do not use your data for advertising. We do not build profiles for sale to third parties.

We do not sell your personal information. We share your data only as follows:

Service providers: We share data with third-party services solely to operate the platform:

• Google Firebase — authentication, database (Firestore), and file storage. Your data is stored in Firebase's US-based infrastructure. Firebase's privacy policy applies.
• Stripe, Inc. — payment processing and Connect account management for DayRate PAY. Stripe receives your payment method data and, for musicians, identity verification data required for Stripe Connect Express onboarding. Stripe's privacy policy applies.
• Resend — transactional email delivery. Invoice content and recipient email addresses are transmitted to Resend for delivery. Resend's privacy policy applies.
• Anthropic, Inc. — receipt image processing for Smart Scan. When you use Smart Scan, your receipt image is sent to Anthropic's Claude API for a single processing request. We do not store your images with Anthropic.
• Netlify, Inc. — hosting and serverless function infrastructure. Netlify processes request data including IP addresses as part of serving the platform.

Within your team: When you are part of a DayRate LIVE Artist Team, certain information is visible to other team members based on their role. Team owners and co-admins can see all invoices and receipts submitted by team members. Your name, email, and role are visible to other team members.

Invoice recipients: When you send an invoice, your name, email, contact information, and invoice details are shared with the recipients you specify.

Legal requirements: We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of DayRate LIVE, our users, or the public.

DayRate LIVE does not store credit card numbers, full bank account numbers, or routing numbers in our database beyond what appears on invoice documents you create.

For DayRate PAY, all sensitive payment data (bank account numbers, identity verification documents) is collected and stored directly by Stripe. DayRate LIVE receives only tokenized references and status information from Stripe. We never have access to your full bank account credentials.

Payment details you enter on invoice forms (Venmo handles, Zelle numbers, PayPal addresses, bank name) are stored on your invoice documents in Firestore and may be visible to invoice recipients.

When you upload a receipt image to DayRate LIVE, it is stored in Firebase Storage under your user ID. Receipt images are private by default and accessible only to you and, where applicable, to team administrators through our secure server-side access system.

When you use Smart Scan, your receipt image is transmitted to Anthropic's Claude API to extract expense data (merchant name, amount, date, category). This transmission is a single-request operation — Anthropic does not retain your image after processing, and we do not store your image with Anthropic. Anthropic's usage policies apply to this processing.

You can delete your receipt images at any time from your Receipt Vault.

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained until you delete your account
• Invoice data — retained until you delete your account or request deletion. Invoices sent to management remain in the team portal until deleted by the team owner.
• Receipt images — retained in Firebase Storage until you delete them or your account is deleted
• Payment records — Stripe retains payment records as required by their policies and applicable financial regulations, which may extend beyond your account deletion

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or legitimate business purposes (such as fraud prevention records).

You have the following rights regarding your personal data:

• Access — you can view your account data, invoices, receipts, and profile at any time within the platform
• Correction — you can update your profile, rate card, and account information directly in the platform
• Deletion — you can delete individual invoices, receipts, and recipients within the platform. To delete your entire account and associated data, contact us at support@dayrate.live
• Export — you can export your invoice data as a CSV from the Team Portal, and download invoice and receipt PDFs at any time
• Portability — contact us if you need your data in a specific format

To exercise any of these rights, contact us at support@dayrate.live. We will respond within 30 days.

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Firebase Security Rules restricting data access to authorized users only
• Server-side authentication verification on all sensitive operations
• Stripe's PCI-compliant infrastructure for all payment data
• Environment variable protection for all API keys and credentials

No security system is perfect. We cannot guarantee absolute security of your data. If you believe your account has been compromised, contact us immediately at support@dayrate.live.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

DayRate LIVE is not directed at children under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us at support@dayrate.live and we will delete the account promptly.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — you may request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete — you may request deletion of your personal information, subject to certain exceptions
• Right to Correct — you may request correction of inaccurate personal information
• Right to Opt Out of Sale — we do not sell your personal information. There is nothing to opt out of.
• Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights

To exercise your California privacy rights, contact us at support@dayrate.live. We will respond within 45 days as required by law.

Categories of personal information collected: identifiers (name, email, IP address), professional information (role, tour, employer), financial information (invoice amounts, payment preferences), and visual information (receipt images).

Business purposes for collection: providing the Service, processing payments, sending transactional emails, fraud prevention, and legal compliance.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by displaying a prominent notice in the Service at least 14 days before the changes take effect.

The most current version of this policy will always be available at dayrate.live/privacy.html. The effective date at the top of this page indicates when this version was last updated.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

DayRate LIVE, LLC
Email: support@dayrate.live
Website: dayrate.live

We take privacy seriously and will respond to all legitimate requests within 30 days.