Privacy Policy

This Privacy Policy explains how Daylma, LLC ("Daylma," "we," "us") collects, uses, and shares information when you use the Daylma app and website (the "Service"). Daylma is a neutral marketplace that connects hospitality employers with workers. We are not an employer or staffing agency, and wages never flow through Daylma.

Information we collect

• Account & profile: your email address, name, role (worker/employer), general area/city, and for workers the self-reported details you add — role tags, experience, languages, transportation, availability, and any certifications. All worker skills, certifications, and history are self-reported and shown as such; Daylma does not verify or guarantee them.
• Employer details: business name, type, and listings you create.
• Applications & messages: the shifts/roles you post or apply to, and messages you exchange with the other party (contact details in messages are automatically masked to keep coordination on-platform).
• Arrival location (Day Labor only): a one-time, approximate arrival confirmation near the job site, captured only with your consent when you confirm arrival, and stored rounded to ~100 meters. We do not track your location continuously or in the background.
• Usage & device data: basic app/site usage and a device/network signal used only as a soft flag for manual fraud review (never an automatic block).
• Waitlist: if you join the waitlist, the email, name, and city you provide.

How we use information

• To operate the marketplace — list, sort, match, and notify — and to let workers and employers connect and coordinate.
• To send transactional emails (sign-in codes, confirmations, application/message and shift notifications) per your preferences.
• For safety and anti-fraud — including location-verified arrival, reputation earned by showing up, and manual review of duplicate or abusive accounts.
• To measure and improve the Service.

How we share information

• Between workers and employers: your profile and application are shared with the relevant employer; an employer's real business name and exact address are revealed to a worker only after hire/acceptance. Employers using a confidential listing may mask their brand publicly, but reputation, general area, and role are never masked, and the employer's identity is revealed to the worker before they commit.
• Service providers: hosting and database (Supabase), transactional email (Resend), and payment processing for employer billing (Stripe). Stripe processes employer payments; Daylma does not store card or bank details.
• Legal/safety: where required by law or to protect users' safety.
• We do not sell your personal information.

Payments

Only employers are ever charged, and only for optional subscription or visibility features — never for wages, which employers pay workers directly, off-platform. Workers are never charged. No card or bank data is stored by Daylma.

Your choices & rights

• Access & export: download a copy of your data from your profile.
• Deletion: delete your account from your profile. Deletion removes your personal information (name, email, notes, photos) and withdraws pending applications; de-identified ratings and message history are retained as "Former user" so the two-sided record stays intact for other users.
• Notifications: manage email notification categories in Settings.
• Depending on where you live, you may have additional rights (access, correction, deletion, portability). Contact us to exercise them.

Analytics & advertising

We use privacy-light analytics to understand how the Service is used (for example, page views, referring site, and coarse city/region — never precise location). If we run ads, we may use advertising cookies or pixels such as the Meta (Facebook) Pixel to measure and improve them; these may set cookies in your browser. You can control cookies in your browser settings and opt out of interest-based ads through your device or the ad platform's settings.

Data retention & security

We keep information for as long as needed to run the Service and meet legal obligations, and periodically purge stale notifications and raw analytics. We protect data with row-level access controls and encryption in transit. No system is perfectly secure.

Children

The Service is for adults 18 and older. Workers attest they are 18+; we do not knowingly collect information from anyone under 18.

Communications

We use email for sign-in codes and transactional notices. If we add SMS in the future, it will be opt-in and consent-based. You can opt out of non-essential emails at any time.

Changes & contact

We may update this policy; we'll post the new effective date here. Contact support@daylma.com with questions.