Privacy, in plain English

Only what you connect, and only what the job needs. Xero: Daykeep reads your contacts, invoices and payments. With your permission it can also prepare a draft invoice in Xero for you to check — each one only after you've said yes to it in Daykeep. A draft is never sent and never affects what a customer owes until you approve it inside Xero yourself. Nothing else in your Xero is ever changed or deleted. Google Calendar: your events — when you first connect, the past 12 months as well as what's coming up, so Daykeep can spot finished jobs that were never invoiced (calendars connected before 12 September 2026 are read back the same way once). Past events are kept, like your invoices, until you delete your account. Reading is how Daykeep spots clashes; if you separately grant booking access, it can also create or move events — and every booking or move is approved by you before it happens. Gmail: metadata only — sender, recipients, subject, labels and Google's short preview line. We never fetch or store the full text of your emails. Outlook (Microsoft): your mail and calendar, read-only — Daykeep can never send from or change either. Your calendar is read from 12 months back when you first connect, the same as Google Calendar. Each time it checks (every 15 minutes), Daykeep reads your 50 most recent inbox emails in full — including ones you've already read — to work out what they need and to spot finished work you haven't invoiced. From each it keeps Microsoft's preview line and a short excerpt (at most 600 characters) as evidence for you, plus, only when an email shows unbilled work, the one sentence that says so. The full text is deleted within 24 hours. Forwarded email: if you choose to forward messages to your private Daykeep intake address, we read the full message once to work out what it needs, keep its opening line, a short excerpt (at most 600 characters) and, if it shows unbilled work, the one sentence that says so, as evidence for you, and delete our copy of the full message within 24 hours. Your customers' details: names, contact details and invoices of the people you do business with reach Daykeep through what you connect. They are held only to do this job for you, are never sold, shared or used to train AI models, and are deleted with your account. Google reviews: the public reviews on your business profile. Missed calls: if you switch on missed-call texts, missed calls are recorded and written out so you can read them.

Connecting a source lets Daykeep read it. It is never permission to act. Two things send on their own once you switch them on: the “got it” reply to a new enquiry, and the text back to a missed call. Everything else waits for your tap.

In Australia. Your data is stored in a database in Sydney. Forwarded email passes through our mail provider's servers on the way in and is not kept there. Every record is tied to your business alone. Isolation between businesses is enforced by the database itself, on every table, not just by application code — one tenant can never read another's rows.

Daykeep uses AI (Anthropic's Claude) to draft messages and write your morning briefing. Your data is never used to train AI models — ours or anyone else's. And every number you see — amounts owed, days overdue, totals — is computed directly from your records by the database. The AI writes sentences around figures; it never invents or calculates them.

We don't sell your data. We don't show ads. We don't share your records with anyone except the services that make Daykeep work (our database host, our email and SMS providers, and the AI provider above), each bound to process your data only on our instructions.

You can disconnect any source at any moment, and Daykeep stops reading it immediately. If you want out entirely, email us and we'll delete your whole account — every invoice, contact, note and log — permanently. The connected services themselves (Xero, Google, Microsoft) always remain yours; Daykeep only ever held a copy.

If you joined the waitlist, we store your email address for one purpose: telling you about access to Daykeep. Ask and it's deleted.

Write to hello@daykeephq.com — a person reads it.