Privacy policy

Last updated: 25 September 2026

This notice explains how AMZSTRATEGY LLC processes personal data when a person visits dayinflow.com, opens a DayInFlow account, uses the service, contacts support or books an appointment through a page managed by one of our customers. It also applies to communications sent through the service. The Cookie Policy separately describes tracking technologies and preferences.

1. Who we are and how to contact us

AMZSTRATEGY LLC, Company ID / Registration Number 2026-002043679, with registered and principal office at 30 N Gould St, Ste R, Sheridan, WY 82801, USA, operates DayInFlow. For privacy requests, data access or complaints: support@dayinflow.com.

2. Roles in processing

When we operate the site, accounts, subscriptions, security, support requests and our business activities, AMZSTRATEGY LLC determines the purposes and means of processing and is the data controller of the relevant data. When an organization-customer uses DayInFlow to organize events, invite members, collect invitee responses and send communications on its behalf, the organization determines the purposes and content of those processing activities; DayInFlow normally acts as a data processor under the Data Processing Agreement. An organization may itself be a processor on behalf of another controller: in that case it must have the necessary instructions and authorizations.

If you book an appointment, the organization shown on the booking page is the primary reference for questions about the content of the event, the questions asked, the lawfulness of the communications and its further uses of the data. We can forward a request to it that concerns data processed on its behalf, after verifying that this is appropriate.

3. What data we process and where it comes from

• Site and account: first name, last name, email, protected credentials or access identifiers via Google/Microsoft, language, time zone, organizations and roles, preferences and settings.
• Subscription and administration: plan, seats, order history, payments, invoices, coupons and subscription states. Full card data is processed by the payment provider; DayInFlow receives identifiers, outcomes and limited details necessary for management.
• Calendars and voluntarily connected integrations: calendar identifiers, availability and metadata of events necessary to detect conflicts; for a booked event, data necessary to create or update the event and, if chosen, a link for the videocall. We do not request access to calendars for advertising purposes.
• Appointments and invitees: first name, last name, email, optional phone, answers to questions configured by the organization, date, time, time zone, assigned host, status, notes and operational history. Information freely entered by the invitee may contain additional data: we ask organizers not to request special categories of data unless strictly necessary and lawful.
• Communications and support: tickets, email, chat with the AI assistant, messages and data you choose to communicate to us, send and delivery logs of emails or SMS.
• Technical and security data: IP address, device, browser, session identifiers, access logs, errors, API usage, anti-abuse signals and cookie preferences.
• Analytics and marketing: visit and referral data only according to the service settings, consent required by law and the Cookie Policy.

Data comes directly from you, from the organization that invites you or where you book, from your workspace administrators, from integrations you choose to connect and from providers that confirm payments or delivery of communications. We do not purchase contact lists to feed bookings.

4. Purposes and legal bases

We use data to create and maintain accounts, organizations, events, availability, bookings, calendar links and communications necessary for the service: performance of the contract or, for invitees, purposes determined by the customer organization. We process payments, invoices and mandatory records to perform the contract and comply with legal obligations. Security, fraud prevention, fault diagnosis, protection of rights and reliable improvement of the service are based, as applicable, on legal obligations or legitimate interest, balanced against individuals’ rights. We respond to support requests to perform the service or to satisfy our legitimate interest in assisting users and visitors.

For non-essential cookies or technologies, promotional communications and other processing that requires it, we ask for applicable consent. You may withdraw consent at any time, without affecting the lawfulness of processing already carried out. The organization that configures SMS, reminders or additional communications to invitees is responsible for a valid legal basis and, where required, for consent and the opt-out option.

The AI assistant may analyze the request and the authorized context to explain the product, help the user or prepare actions within the limits of its role. Sensitive actions, ownership changes, billing and permissions cannot be executed by the assistant. Automated replies may be inaccurate: verify before relying on legal, financial or operational guidance that is material.

5. Recipients and sharing

Data may be accessible to authorized members of the organization, event hosts, invitees to the extent necessary for the booking, DayInFlow staff authorized for support and security, and contracted providers for hosting, databases, authentication, payment, email, SMS, AI and monitoring. If the user connects Google, Microsoft, Zoom or other services, the necessary data is transmitted to the chosen service and its processing is also governed by the respective terms and notices. A list of providers and categories is available on the Subprocessors and transfers page.

We do not sell invitees’ personal data. We do not allow customers to view calendars or appointments of other organizations.

6. International transfers

AMZSTRATEGY LLC is based in the United States and some providers may process data outside the European Economic Area, the United Kingdom or the user's country of origin. When required, we adopt a valid transfer mechanism, such as an applicable adequacy decision or standard contractual clauses, together with appropriate supplementary measures. The list of providers and the actual localization of processing must remain up to date on the Subprocessors and transfers page; you can request information about the safeguards via support@dayinflow.com.

7. Retention

We retain data while the account or organization is active and as necessary for the purposes described. Configurations exceeding the plan after a downgrade to Free or from Full to Pro remain recoverable for 30 days, then are deleted according to the applicable plan; information accessible on the lower plan remains available. Deleted events remain in the trash for 90 days. A voluntary deletion of the organization allows 7 days for possible restoration before operational deletion. After a delinquency and the grace period, suspension lasts 30 days; this is followed by a 30-day period to export data prior to operational deletion. Encrypted backups are rotated within an additional 30 days, except for retention obligations or documented security needs. Imported Zoom transcripts are deleted after 90 days; AI chat history is retained for 30 days. Invoices and transaction data are kept separately for the period required by applicable law.

These periods describe product policy and may be extended when law requires retention, there is a dispute or it is necessary to protect rights; in such cases access will be limited. The customer organization must inform its invitees of any additional periods for data it exports or processes outside DayInFlow.

8. Security

We apply role- and organization-based access controls, credential protection, appropriate encryption, operational logging, anti-abuse limits, backups and checks proportionate to the risk. No online service can guarantee zero risk. In the event of an incident we assess impact and notification obligations and, when we act as processor, we inform the client organization without undue delay.

9. Rights and choices

Where the law provides, you may request access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest and withdrawal of consent. You may also lodge a complaint with the competent authority. Write to support@dayinflow.com; we may ask you for information necessary to verify identity, without requesting passwords. If the request concerns data of a booking processed on behalf of a customer, we will cooperate with the customer who determines the processing. Cookie choices are in the Cookie Policy and in the preferences panel.

10. Minors, changes and contacts

DayInFlow is intended for business users and people who book services; it is not designed for autonomous use by minors below the applicable age. Organizers offering services to minors are responsible for the necessary authorizations. We will publish changes to this notice with an updated date; if the change is material, we will provide appropriate notice. For any questions: support@dayinflow.com.