Legal

Privacy Policy

Effective 4 November 2026

Dayspark is a marketing platform operated by Volat Enterprises Pty Ltd (“Volat”, “we”, “us”, “our”). This policy explains what information Dayspark collects, how we use and share it, and the choices you have. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

• 1. Who this policy covers
• 2. Information we collect
• 3. How we use information
• 4. Google user data
• 5. Meta (Facebook and Instagram) data
• 6. AI processing
• 7. Who we share information with
• 8. Storage and overseas transfer
• 9. Security
• 10. Retention and deletion
• 11. Access, correction and complaints
• 12. Cookies
• 13. Changes to this policy
• 14. Contact us

1. Who this policy covers

Dayspark is used by marketing agencies and businesses (our “customers”) and the people they invite (“users”). This policy covers:

• users who sign in to Dayspark;
• information from third-party accounts that a user connects to Dayspark; and
• visitors to dayspark.app.

When a customer gives Dayspark information about its own customers, the customer decides why that information is processed, and we process it on the customer’s behalf and according to its instructions. The customer is responsible for having a lawful basis and giving any required notices for that information.

2. Information we collect

Account information

Your name, email address, organisation, role and sign-in details. You sign in with your Google account or a one-time email code; we do not ask for or store your passwords, including passwords for the accounts you connect.

Connected account data

When a user chooses to connect an account on a third-party platform, we receive data from that platform through its official API, limited to what the user authorises. Depending on the platform, this can include account details, campaign and content information, and performance figures.

Information customers provide

Content, files and business information that customers enter into or upload to Dayspark, including any records about their own customers that they choose to provide.

Technical information

IP address, browser type, pages visited within the app, and logs of actions and errors, used to keep Dayspark secure and working.

3. How we use information

• To provide Dayspark’s features to the customer who connected or provided the information.
• To carry out actions a user has requested or approved.
• To secure the service, prevent misuse, fix problems and provide support.
• To send service emails, such as sign-in links, alerts and reports.
• To meet legal obligations.

We do not sell personal information.

4. Google user data

When a user signs in with Google and grants access, Dayspark may access data from Google Ads, Google Analytics and Google Business Profile accounts that the user manages. We use it only to provide Dayspark’s features to that user’s organisation, and only to take actions in those accounts that the user requests or approves.

We do not:

• transfer Google user data to others except as needed to provide those features, to comply with law, or as part of a merger or sale of the business with notice to users;
• use Google user data for advertising, including retargeting, personalised or interest-based ads;
• sell Google user data, or use it to determine creditworthiness or for lending; or
• use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.

Our staff do not read Google user data except with the user’s consent (for example, to help with a support request), where needed for security, or where required by law. You can remove Dayspark’s access at any time from your Google Account permissions.

5. Meta (Facebook and Instagram) data

When a user connects a Meta account, Dayspark receives data about the accounts, Pages and Instagram accounts that the user selects, with the permissions shown on Meta’s consent screen, and uses it only to provide Dayspark’s features and carry out actions the user requests or approves. You can remove Dayspark’s access at any time in your Facebook settings under Business Integrations.

Deleting your data. To ask us to delete data we hold that came from your Facebook or Instagram account, email us at the address in section 14 with the subject “Data deletion request”. We will confirm and complete the deletion within 30 days, except where we must keep information to meet a legal obligation.

6. AI processing

Some Dayspark features use AI models. Information needed for those features is processed by AI service providers on our behalf, under terms that do not allow them to train their models on it.

7. Who we share information with

• Within the customer’s organisation, and with people the customer chooses to share with.
• Service providers that host and run Dayspark for us (such as cloud hosting, data storage, email delivery and AI providers), under contracts that limit their use of the data.
• Third-party platforms a customer has connected, when Dayspark acts on that customer’s instructions.
• Others where required by law, to protect rights and safety, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply.

8. Storage and overseas transfer

Our service providers store and process data in Australia, the United States and other countries where they operate. When we send personal information overseas, we take reasonable steps to make sure the recipient protects it in a way that is consistent with the Australian Privacy Principles.

9. Security

Data is encrypted in transit and at rest. Credentials for connected accounts are stored encrypted, each customer’s data is kept separate, and staff access is limited to what is needed. No system is completely secure, and we will notify affected people and the regulator of an eligible data breach as the law requires.

10. Retention and deletion

We keep information for as long as the customer’s account is active and as needed to provide the service. When a user disconnects an account, we stop collecting new data from it. When a customer closes its account, or asks us to, we delete or de-identify its data within 90 days, except where we must keep information to meet legal, tax or accounting obligations. Backups are overwritten on a rolling schedule.

11. Access, correction and complaints

You can ask to access, correct or delete personal information we hold about you by contacting us. If your information was provided to us by a customer (for example, your agency or employer), we may refer your request to that customer. If you have a privacy complaint, please contact us first and we will respond within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner.

12. Cookies

The Dayspark app uses essential cookies to keep you signed in and secure. This website does not use advertising or analytics cookies. Fonts on this website are served by Google Fonts, which receives your IP address when the page loads.

13. Changes to this policy

We may update this policy as Dayspark changes. We will post the new version here with a new effective date and, for significant changes, tell customers by email or in the app.

14. Contact us