Privacy Policy

1. WHO WE ARE

This Privacy Policy applies to all products, applications, and services offered by Daydream Nation Tech Labs, LLC ("Daydream Nation," "we," "our," or "us") — the owner and operator of Capture Links. We are a Delaware-registered technology company providing secure, AI-powered document and data capture solutions. You may contact us at human@daydreamnation.io.

Daydream Nation operates entirely on Google Cloud Platform (GCP) infrastructure. We do not use AWS or third-party cloud providers. Google Cloud complies with SOC 2 Type II, ISO 27001, ISO 27799 (Health Data Security), GDPR, and other major international data protection standards.

2. SHARING DATA

We never sell or rent your personal or business data. Capture Links is built to prioritize data security and privacy by design.

Capture Links uses machine-only workflows for all processing. No human operators or data extraction teams have access to user data. All document parsing, AI classification, and text extraction are performed via proprietary automated pipelines on encrypted servers.

2.1 Third Parties

Connected Integrations

At your discretion, you may connect third-party applications (e.g., accounting, CRM, or cloud storage services) to Capture Links. Such integrations are optional and require your explicit consent before activation.

Google Services

If you connect Capture Links with Google Workspace, we may request access to:

• View your email address and profile information.
• Optionally, read or write to Google Drive folders you specify for document input/output workflows.
• Read specific Gmail messages matching your defined workflow filters (if applicable).

We will never read or store the content of unrelated emails or files, and we will never use your Google Workspace data to train generalized AI models.

Banking or Financial Data

If you choose to enable bank data imports, Capture Links relies on secure, token-based integrations (e.g., Plaid or Yodlee equivalents) — your login credentials are never stored by us.

3. STORING DATA

Capture Links stores only the data necessary for proper service operation, for as long as you maintain an active account.

Cloud Infrastructure

All data is stored in encrypted form (AES-256 at rest, TLS 1.3 in transit) on Google Cloud servers in compliance with SOC 2 and ISO 27799 standards. Google engineers and physical operators cannot access encrypted user data.

Data Retention and Control

You remain in full control of your data. You may view, modify, export, or delete your data at any time via the Capture Links dashboard or by contacting human@daydreamnation.io.

Location Data

If you grant access, location data is used only for contextual tagging of document captures (e.g., business receipt locations). Location data is never shared or stored beyond your account.

4. HOW WE USE YOUR DATA

Your data is used solely to improve your experience and ensure system accuracy. Examples include:

• Training proprietary machine learning models for better document parsing and field recognition (performed on anonymized, aggregated datasets only).
• Providing analytics dashboards and compliance-ready exports.
• Troubleshooting performance issues and maintaining uptime.

We do not use your identifiable data to train general-purpose AI models or sell insights to third parties.

5. DELETING DATA

You may delete your data at any time:

• Account Deletion: Delete your account through settings or email human@daydreamnation.io. This permanently removes all associated data and documents.
• Document Deletion: Any document deleted from your dashboard is permanently erased from all systems.
• API Deletion: API users have access to a permanent deletion endpoint for documents or datasets.

Once deletion is confirmed, the process is irreversible.

6. PAYMENT INFORMATION

Payments for Capture Links are processed exclusively by Stripe, a PCI DSS Level 1 certified provider. Credit card data is transmitted directly to Stripe; Daydream Nation does not access or store your card information.

7. SECURITY AND COMPLIANCE

We take security and compliance seriously. Capture Links adheres to:

• SOC 2 Type II and ISO 27001/27799 standards for data protection and operational security.
• All data encrypted at rest (AES-256) and in transit (TLS 1.3).
• Enforced password hashing using PBKDF2.
• Optional MFA (Multi-Factor Authentication) and session timeouts.
• Annual penetration testing and quarterly vulnerability assessments.
• Continuous Google Cloud compliance monitoring.

All internal operations follow the Principle of Least Privilege — meaning only authorized engineers with compliance clearance can access system logs (never user data).

8. COOKIES AND ANALYTICS

Cookies

Capture Links uses only essential session cookies for authentication and account continuity.

Analytics

We use Google Analytics (configured for anonymized IP tracking) and internal monitoring tools to understand aggregate usage patterns. No personally identifiable data is stored for analytics purposes.

Support Data

If you contact us via chat or email, we may temporarily store the conversation for support follow-up and quality assurance.

9. YOUR RIGHTS

Depending on your jurisdiction (e.g., under GDPR or CCPA), you may have the following rights:

• Access your personal data.
• Request correction or deletion.
• Object to or limit processing.
• Port your data to another provider.

You can exercise these rights by contacting human@daydreamnation.io.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically to reflect product, legal, or regulatory changes. The latest version will always be available at capturelinks.ai/privacy. Substantial updates will be communicated by email.

11. CALIFORNIA PRIVACY RIGHTS

California residents may request information regarding our data disclosure practices or deletion of their personal information under the California Consumer Privacy Act (CCPA). We do not sell user data. Contact human@daydreamnation.io to make a verifiable request.

12. CONTACT

Daydream Nation Tech Labs, LLC
Email: human@daydreamnation.io
Registered in Delaware, USA

For privacy, compliance, or security inquiries, please contact our Data Protection Officer at human@daydreamnation.io.