Privacy Policy

Effective October 14, 2026

This policy explains what personal information Daure (operated by Aryan, Bengaluru, India) collects, why, and the choices you have. It covers two groups: our customers and visitors, and the businesses that appear in our lead data.

1. Customers and website visitors

We collect:

• Account details: your email address, name and company, and the niches you choose.
• Sample requests: the email address and niche you enter in the free sample form.
• Billing records: plan, payment status and amounts. Payments are processed by Paddle.com, our Merchant of Record, which handles your card details and billing address under its own privacy policy. Card details never reach us.
• Usage and logs: basic server logs such as IP address, browser type and pages requested, kept for security and debugging. To stop abuse of our public forms we store a one-way, salted hash of your IP address, never the address itself.

We use this information to provide the Service, send your lead lists and login links, handle billing, answer support requests and keep the Service secure. Our legal bases are performance of our contract with you and our legitimate interest in running and protecting the Service.

2. Businesses in our lead data

Our lead lists describe businesses, not consumers. Records are built from public sources: Meta's Ad Library and the public pages of each business's website. A record may include the business name, website, ad details, technology detected on the site, and contact details the business published, such as a support email or social media account. Where a published contact identifies a person, we process it on the basis of legitimate interest in business-to-business communication.

If your business appears in our data and you want it removed, use the form at daure.in/remove or email support@daure.in with your website address. The record is deleted at once, and your domain is kept on a do-not-collect list (only the domain, so we can honor the request in future scans). Customers are required by our terms to honor opt-outs.

We never collect information from logged-in or private areas, never buy personal data, and do not knowingly collect information about consumers. Lead data is used only for business-to-business outreach.

3. Cookies

We use only the cookies needed to keep you logged in. We do not use advertising or analytics cookies.

4. Service providers

We share data only with providers that help us run the Service, under their own data protection terms:

• Supabase: database and login
• Vercel: website hosting
• Apify: running our data collection jobs
• Resend: sending email
• Paddle.com: payments, invoices and sales tax, as our Merchant of Record
• An AI text provider (Google or Anthropic), only when generating opening lines from business data

We do not sell personal information.

5. International transfers

Our providers store data in the United States and other countries. Where required, transfers rely on the providers' standard contractual clauses.

6. Retention

• Account and billing records: for as long as you are a customer, then up to 8 years where tax law requires.
• Sample requests: 12 months.
• Lead records: until they become outdated or a removal request is received.
• Server logs: up to 90 days.

7. Your rights

Depending on where you live, including under India's Digital Personal Data Protection Act, the GDPR or US state laws such as the CCPA, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. To make a request, email support@daure.in. We respond within 30 days. You may also complain to your local data protection authority.

Do not sell or share my personal information: California residents and others can opt out of their information appearing in our lead data at daure.in/remove. We will not treat you differently for using any of these rights.

8. Security

Data is encrypted in transit and at rest, access is limited by role, and database rules separate customers so each one sees only their own leads. Stored mailbox passwords are encrypted. Login uses one-time email links, so there are no passwords to steal. If we ever learn of a breach that affects your personal information, we will tell you and the relevant authorities as the law requires.

9. Children

The Service is for businesses and is not directed at anyone under 18.

10. Changes

If we change this policy in a material way, we will update the date above and email active customers.

11. Contact

Privacy questions and requests: support@daure.in.