1. Two roles: ours and your organisation's
Danno is a booking service that organisations (employers, schools, clubs) buy for their people. That gives us two roles:
We are the controller for
Your account (sign-in details, profile), billing and subscriptions, visits to our public website, the newsletter, support conversations and the security of the service.
Your organisation is the controller for
What happens inside its workspace: your membership and role, your bookings, check-ins, waitlist places, who is in on a day, groups, notes and reports. We process that data only on the organisation's instructions, under our data processing addendum. Questions or requests about it are best sent to your organisation; if you send them to us we will pass them on.
2. What we collect and where it comes from
- Account: your name, email address, password (stored only as a salted hash), profile picture if you add one, time zone and preferences.
- Sign-in with Google or Microsoft: if you choose it, your name, email address and account ID from that provider.
- Organisation data: your membership, role, location and groups (often entered by your organisation's administrators, for example when they invite you), your bookings and their notes, check-ins, waitlist places and notes administrators keep about members.
- Calendar connection: if you connect Google Calendar or Outlook, an access token (stored encrypted) so we can add and update your bookings in your calendar.
- Billing: for organisations on a paid plan, the billing contact, address and VAT number. Card details go straight to Stripe; we never see or store them.
- Support and newsletter: what you write to us or in the website chat, and your email address if you subscribe to the newsletter.
- Technical data: IP address, browser and device details in server logs and security records (failed sign-ins, rate limits), and error reports.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, signing you in | Contract with you (Art. 6(1)(b)); for members invited by an organisation, our legitimate interest in providing the service the organisation bought (Art. 6(1)(f)) |
| Bookings, check-ins, waitlists, who's in, reports and calendar sync inside an organisation | Decided by your organisation as controller; we act on its instructions (Art. 28) |
| Service emails (sign-in links, invitations, booking changes, trial and billing notices) | Contract; legitimate interests |
| Billing, invoices and tax records | Contract; legal obligation (Art. 6(1)(c)) |
| Keeping the service secure, preventing abuse and fixing errors | Legitimate interests |
| Answering support questions, including the website chat | Legitimate interests; the chat widget itself only loads with your consent |
| Newsletter | Consent (Art. 6(1)(a)), confirmed by email; unsubscribe from any issue |
| Website visitor statistics, if switched on | Consent |
Where we rely on legitimate interests, they are running a reliable, secure service for the organisations that pay for it, and we have weighed them against your rights. You can object at any time (section 7). We don't sell personal data, use it for advertising, or make decisions about you by automated means that have legal or similarly significant effects.
4. Who we share it with
We use the providers below (subprocessors) to run Danno. Each is bound by a contract that limits what they can do with the data. The current list, and how we announce changes, is on the subprocessors page.
| Provider | Purpose and data | Where and safeguard |
|---|---|---|
| Fly.io Fly.io, Inc. (USA) | Application hosting: runs the web app and background jobs. All service data while it is processed; server logs (IP address, request path). Used: Always. | Frankfurt, Germany (region fra). EU–US Data Privacy Framework; standard contractual clauses (Fly.io DPA). |
| Supabase Supabase, Inc. (USA), on Amazon Web Services | Database hosting. All service data (accounts, organisations, bookings, logs), encrypted at rest. Used: Always. | Frankfurt, Germany (AWS eu-central-1). EU standard contractual clauses with the UK Addendum (Supabase DPA). |
| Tigris Tigris Data, Inc. (USA) | File storage and the nightly database backup. Uploaded floor plans, icons and profile pictures; the nightly database backup. Used: Always. | Tigris global object storage, written from Frankfurt. Standard contractual clauses (Tigris DPA). |
| GitHub GitHub, Inc. (USA) | Runs the nightly backup job that copies the database to storage. The database backup, while the job runs. Used: Always. | USA. EU–US Data Privacy Framework and UK extension; standard contractual clauses. |
| Cloudflare Cloudflare, Inc. (USA) | DNS, forwarding of email sent to our addresses, and the Turnstile bot check on public forms. IP address and browser signals (bot check); emails you send us. Used: Always. | Global network. EU–US Data Privacy Framework and UK extension; standard contractual clauses. |
| Resend Plus Five Five, Inc. (Resend, USA) | Sending emails (sign-in links, invitations, booking emails). Name, email address and the email's content. Used: Always. | USA. EU–US Data Privacy Framework and UK extension; EU standard contractual clauses with the UK Addendum (Resend DPA). |
| Stripe Stripe Payments Europe Ltd / Stripe Payments UK Ltd, with Stripe, Inc. | Subscription billing and payments. Billing contact, billing address, VAT number, payment card details (held by Stripe). Used: Paid plans. | EU, UK and USA. EU–US Data Privacy Framework and UK extension; standard contractual clauses (Stripe DPA). |
| tawk.to tawk.to inc. | Live chat on the public website. Chat messages, any name or email you give, IP address and browser details. Used: Only on the public website, and only if you accept optional cookies. | USA and other countries. EU–US Data Privacy Framework and UK extension; EU standard contractual clauses with the UK Addendum (tawk.to DPA). |
| Sentry Functional Software, Inc. (USA) | Error monitoring. Technical error reports with an opaque user and organisation ID (no names or email addresses). Used: When error monitoring is switched on. | USA. EU–US Data Privacy Framework and UK extension; standard contractual clauses (Sentry DPA). |
| Plausible Plausible Insights OÜ (Estonia) | Cookie-free visitor statistics. Page views; IP address used only to count unique visitors, never stored. Used: Only if switched on, and only if you accept optional cookies. | EU. Processed in the EU. |
Services you connect
These act for you under their own privacy policies:
- Google: Sign in with Google; adding your bookings to Google Calendar. Your name, email address and profile picture from Google; the bookings we add to your calendar.
- Microsoft: Sign in with Microsoft; adding your bookings to Outlook. Your name and email address from Microsoft; the bookings we add to your calendar.
- OpenStreetMap: Map tiles and address search on location pages. Your browser's IP address and the address typed into the search.
Danno's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use calendar access only to add, update and remove your own bookings in your calendar; we don't read your other events, show the data to people, use it for advertising or use it to train AI models.
Inside an organisation, administrators and (depending on its settings) other members can see bookings, who is in and related details. We may also disclose data when the law requires it, or to a buyer of the business, who would have to keep this policy's promises.
5. International transfers
The service and its database run in Frankfurt, Germany, which the UK recognises as adequate. Some providers above are based in, or reach data from, the USA and other countries. Where they do, the transfer is protected by the EU standard contractual clauses (with the UK Addendum or the UK International Data Transfer Agreement), or by the EU–US Data Privacy Framework and its UK extension where the provider is certified. Ask us for a copy of the relevant safeguards at hello@getdanno.com.
6. How long we keep it
- Account data: while you have an account. You can download a copy and delete it from Me › Danger zone at any time; it happens at once, with no grace period. We remove your name, email, password, picture, sign-in identities, API keys, calendar connections (and ask Google to revoke calendar access) and notifications, and cancel your future bookings. Your organisations keep a record of past bookings without their titles or notes and without your name or email, and your email address is replaced with a pseudonym in activity logs.
- Organisation data: while the organisation is a customer. Its owners can download a copy and delete it from Settings › Danger zone; that deletes everything it holds at once (people's memberships, every booking, the activity log, floor plans and files) and cancels its subscription. People's own accounts stay until they delete them.
- Backups: deleted data can remain in our database backups for up to 30 days. They're only used to recover from a disaster, and if one is ever restored we repeat the deletions made since.
- In-app notifications: 90 days.
- Activity (audit) log: 30 to 365 days depending on the organisation's plan.
- Newsletter: until you unsubscribe; unconfirmed sign-ups are deleted after 48 hours.
- Cookie choices: the log of choices is kept for 400 days.
- Billing records: as long as UK tax law requires (currently at least 5 years after the 31 January filing deadline for the tax year).
7. Your rights
Under UK and EU data protection law you can ask to access, correct, delete, restrict or move your data, and object to how we use it. Where we rely on consent you can withdraw it at any time.
Get a copy
Download your data from Account settings.
Correct it
Update your profile at any time.
Delete it
Delete your account in Account settings, or ask us to.
For anything else, email hello@getdanno.com. We reply within one month, and may ask you to confirm your identity. Requests about an organisation's data go to that organisation (we help it answer).
8. Complaints
Please tell us first at hello@getdanno.com: we acknowledge complaints within 30 days and tell you what we have done. You can also complain to the UK Information Commissioner's Office (ico.org.uk/make-a-complaint, 0303 123 1113) or, in the EU, to the data protection authority where you live or work.
9. Children
Danno is for organisations and their members; we don't offer it directly to children. Nobody under 13 may have an account. An organisation that invites members under 18 (a school, for example) is responsible for its lawful basis and any consent needed for them.
10. Cookies
We use cookies that keep you signed in and the site secure. Optional ones (the website chat and, if switched on, visitor statistics) load only if you accept them. Details and your choices: cookie policy.
11. Security
Data is encrypted in transit (HTTPS) and at rest, passwords are stored as salted hashes, calendar tokens are encrypted, and access inside an organisation follows the roles its administrators set. If a breach affects your data we will tell the organisation, the regulator and, where the law requires, you.
12. Changes
We'll post changes here and email account holders about significant ones before they take effect.