daste.

Privacy Policy

Last updated: 4 November 2026

1. Overview

This policy explains what personal data daste collects, how we use it and the choices you have. We follow Thailand's Personal Data Protection Act (PDPA). We collect only what we need to run daste, and we never sell your data.

2. Data we collect

  • Account: your email address and password. Passwords are stored securely hashed; we can't read them.
  • Planner: the tasks, times and notes you add.
  • AI planning (Pro): the messages you type into the AI chat and the tasks it suggests.
  • Payments (Pro): your subscription status and Stripe customer ID. Card details are handled by Stripe, not by us.
  • Technical: sign-in cookies and basic logs (such as IP address and browser) needed for security.

3. How we use it

We don't use your data for advertising.

  • to provide daste and sync your planner across devices,
  • to run AI planning when you ask for it,
  • to process payments and manage your subscription,
  • to keep the service secure and fix problems,
  • to send essential emails, such as account confirmation and password reset.

4. Services that process your data

We use trusted providers to run daste. They only process data on our behalf:

  • Supabase: database and sign-in.
  • Vercel: website hosting.
  • Stripe: payments.
  • Anthropic (Claude): AI planning. Only the message you send is shared, and under Anthropic's commercial terms it isn't used to train their models.

5. Cookies and local storage

We use only essential cookies: to keep you signed in and to remember your language. Your theme choice is saved in your browser. We don't use advertising or tracking cookies.

6. How long we keep data

We keep your data while your account is active. If you delete your account, we delete your planner data. Payment records may be kept longer where tax and accounting laws require it.

7. Your rights

Under the PDPA you can ask us to:

  • access or get a copy of your data,
  • correct inaccurate data,
  • delete your data or your account,
  • restrict or object to processing, or withdraw consent.

8. Security

Data is encrypted in transit (HTTPS), and access is protected so each user can see only their own data.

9. Children

daste isn't intended for children under 13.

10. Changes and contact

We'll update the date above when this policy changes.

To use your rights or ask a question: support@getdaste.com