Data Processing

This page describes how Danab acts as a data processor for the content you create — your projects, tasks, contacts, invoices, and focus sessions. It complements our Privacy Policy.

1. What we process

• Workspace content: projects, tasks, calendar events, contacts, invoices, quotations.
• Activity data: focus session durations and timestamps.
• Account data: email, display name, profile preferences.

2. Purpose of processing

We process this data only to deliver the Danab service: storing it, syncing it across your devices, and showing it back to you. We don't analyze your content for advertising, profiling, or model training.

3. Where your data lives

Your data is stored on secure cloud infrastructure with row-level security policies that ensure only you (and people you've explicitly shared with) can access it. All data is encrypted at rest and in transit.

4. Sub-processors

We rely on a small number of vetted sub-processors:

• Hosting & database: stores your workspace.
• Authentication: manages secure sign-in.
• Email delivery: sends transactional emails (receipts, password resets).
• Payment processor: handles billing for Pro subscriptions.

Each sub-processor is bound by a data processing agreement.

5. Security measures

• TLS encryption for all network traffic.
• Encryption at rest for stored data.
• Row-level security policies on every table.
• Hashed passwords using modern algorithms.
• Regular automated backups.
• Access logs and monitoring.

6. Data residency

Your data is stored in regional data centers with strong privacy protections. We do not transfer your data to jurisdictions without adequate data protection laws.

7. Your data rights

• Export: request a copy of all your data in JSON format.
• Correction: edit or update any data from your account.
• Deletion: permanently delete your account and all associated content.
• Portability: take your data with you in a machine-readable format.

To exercise these rights, email support@danab.app.

8. Data breach notification

In the unlikely event of a data breach affecting your information, we will notify you by email within 72 hours of becoming aware of the breach, as required by applicable law.

9. Retention

Active workspace data is retained as long as your account exists. After account deletion, all content is purged within 30 days. Backups are rotated out within 60 days.

10. Contact

For data processing questions, reach our team at support@danab.app.