Privacy Policy
This Privacy Policy explains how Sahlware LLC collects, uses, shares, and protects personal data when you use DailyQuotes, the website and web app at https://dailyquotes.sahlware.com (the "Service"). It also explains the choices and rights you have. Our Terms of Service and Acceptable Use and Content Policy describe the Service itself.
1. Who We Are
Controller. Sahlware LLC ("Sahlware," "we," "us"), a Washington limited liability company, is the controller of personal data processed through the Service.
- Address: Sahlware LLC, 33819 NE 52nd Way, Carnation, WA 98014, USA
- Privacy requests: privacy@sahlware.com
- General contact: dailyquotes@sahlware.com
We have not appointed a Data Protection Officer, and we have not appointed a representative in the European Union or the United Kingdom. If you are in the EEA or the UK, please contact us directly at privacy@sahlware.com. You may also lodge a complaint with your supervisory authority (in the UK, the Information Commissioner's Office).
This Policy covers the Service. The general sahlware.com website and other Sahlware products have their own privacy policies.
2. Personal Data We Collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email address, profile picture (if provided by Google sign-in), Kinde user ID, organization ID, sign-in method | You, and our authentication provider Kinde; Google if you sign in with Google |
| Guest identifiers | A random guest ID (UUID) stored in a cookie, with fallbacks in browser storage | Generated in your browser |
| Terms acceptance record | The version of the Terms you accepted, your user or guest ID, and the time of acceptance | Your browser; our servers |
| Prompts and content | Themes and prompts you enter; generated quotes, titles, attributions, and images; your edits; narration audio, music, and videos; publish status; recently viewed Collections (last 100) | You; generated by our AI providers at your request |
| Plan and usage data | Plan, entitlements, usage and credit counters, billing anchor date | You; Kinde (billing) |
| Payment data | Billing status and history as reported by our billing provider. We never receive or store full card numbers — you enter them on the provider's hosted pages | Kinde and its payment processor, Stripe |
| Consent records | Your cookie and storage choices, when you made or changed them, the prior and new settings, IP address, browser user-agent, and where the change came from (audit trail) | Your browser; our servers |
| Technical and log data | IP address, browser user-agent, request and event logs, error diagnostics, performance data | Your device; our hosting and telemetry systems (Azure Application Insights). Frontend telemetry events are sent to our API and include IP address and user-agent |
| Content moderation records | For refused requests, the moderation decision and category scores (not the full prompt text) | Our safety-screening systems |
| Communications | Messages you send us, support requests, complaints and notices (including copyright notices and counter-notices) | You |
We do not ask for sensitive data (such as health, religion, or sexual orientation). Please do not include sensitive or third-party personal information in prompts. A prompt you choose to write may reveal something sensitive about you; we use it only to generate your Collection (Section 3).
Is providing data required? Account data is needed to create an account; prompts are needed to generate content. Everything else is optional or collected automatically as described. Guests can use limited features without an account.
What we do not collect. We do not use analytics software development kits or marketing email lists, and we do not display ads. We do not sell personal data.
3. Why We Use Personal Data and Our Legal Bases
Legal bases below apply under the EU GDPR and UK GDPR. U.S. state laws are covered in Section 8.
| Purpose | Data used | Legal basis (GDPR Art. 6(1)) |
|---|---|---|
| Create and operate your account; sign you in | Account data, technical data | Contract (b) |
| Let guests use the Service and keep their Collections and limits | Guest identifiers, prompts and content, usage data | Contract (b) (steps at your request); the guest ID is strictly necessary storage |
| Record your acceptance of the Terms | Terms acceptance record | Contract (b); legitimate interests (f) in proving the agreement |
| Generate, store, edit, display, and render your Collections and videos | Prompts and content | Contract (b) |
| Share links and publish to the community feed, at your request | Prompts and content | Contract (b) |
| Subscriptions, billing, plan limits, credits | Account, plan and usage, payment data | Contract (b); legal obligation (c) for tax and accounting records |
| Record and prove consent choices | Consent records | Legal obligation (c) (Art. 7(1) duty to demonstrate consent) and legitimate interests (f) in defending claims |
| Automated content-safety screening of prompts, generated content, edits, and publish requests | Content, content moderation records | Legitimate interests (f) in keeping the Service safe and lawful; legal obligation (c) where platform law applies |
| Security, fraud and abuse prevention, rate limiting, enforcing our Terms | Technical data, usage data, content | Legitimate interests (f) in protecting the Service and users |
| Diagnostics, reliability, and performance monitoring | Technical and log data | Legitimate interests (f) in running a working service |
| Handling complaints and legal notices (copyright, defamation, privacy), and meeting platform-law duties | Content, account data, communications | Legal obligation (c) where the EU Digital Services Act or UK Online Safety Act applies; otherwise legitimate interests (f) |
| Service emails (receipts, security, changes to terms) | Account data | Contract (b); legal obligation (c) |
| Legal claims, compliance, and corporate transactions | Any relevant data | Legitimate interests (f); legal obligation (c) |
Legitimate interests. Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details and you can object (Section 7).
Consent. Where we ask for consent (for example, for any future non-essential cookies), you can withdraw it at any time through Cookie settings in the Service without affecting processing that happened before withdrawal.
Automated decisions. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. AI models generate content, and automated safety checks may refuse a prompt, an edit, or a publish request. If that happens you can rephrase, or you can ask for a person to review the decision through the appeal process in the Content Policy.
AI training. We do not use your prompts or content to train AI models, and our API agreements with OpenAI and ElevenLabs do not permit them to train on it. OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring.
4. Who We Share Personal Data With
We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
4.1 Service providers (processors and sub-processors)
| Provider | Role | Data | Location |
|---|---|---|---|
| Kinde (Kinde Australia Pty Ltd) | Authentication, user management, hosted billing and subscriptions | Account data, plan and billing data, sign-in logs | Australia and the United States |
| Stripe | Card payments (as Kinde's payment processor) | Payment data entered on hosted checkout pages | United States |
| OpenAI | Generating quotes, titles, attributions, image prompts, images, and narration audio; automated content-safety screening | Prompts, generated text and images, content sent for generation or screening | United States |
| ElevenLabs | Generating background music for videos | Music prompts derived from your Collection | United States |
| Microsoft Azure | Hosting (Azure Functions), storage (Blob, Table, Queue), cache (Azure Cache for Redis), backups, and telemetry (Application Insights) | All categories stored by the Service | United States (East US 2 and West US regions) |
| Cloudflare | Website hosting and delivery (Cloudflare Pages) | IP address, request logs | Global network |
4.2 Independent third parties
- Google — if you choose "Sign in with Google," Google processes your sign-in under its own privacy policy. Our pages also load fonts from Google Fonts (fonts.googleapis.com), so Google receives your IP address when a page loads.
- Other users and the public — Collections you share by link or publish to the community feed are visible to anyone who has the link or visits the feed. We do not display your name, email, or any other publisher identity alongside a published Collection.
- Authorities and claimants — when required by law, to respond to valid legal process, to protect rights and safety, or to handle copyright and other legal notices (a copyright counter-notice, including your contact details, is forwarded to the complaining party as the law requires).
- Business transfers — a buyer or successor in a merger, acquisition, or asset sale, subject to this Policy.
5. International Transfers
Sahlware is based in the United States, and our providers process data in the United States and other countries. If you are in the EEA, UK, or Switzerland, your data will be processed in countries that may not offer the same level of protection as your own. Where EU or UK law requires, we rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) for certified recipients, and otherwise on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, supplemented by encryption in transit and at rest. You can ask for a copy of the relevant safeguards at privacy@sahlware.com.
6. How Long We Keep Personal Data
| Data | Retention |
|---|---|
| Account data | While your account is open; deleted within 30 days after you ask us to delete your account |
| Collections (quotes, images, audio, video) | Until you delete them. Deleting a Collection removes it from the app immediately, and a queued cleanup purges its images, audio, and video from storage |
| Published or shared Collections | Until you unpublish or delete them (copies others already made are outside our control) |
| Guest Collections and guest IDs | May be deleted after 12 months of inactivity |
| Prompts and outputs at OpenAI | Up to 30 days for abuse monitoring, under OpenAI's API terms |
| Recently viewed history | Last 100 items; deleted with your account |
| Usage and credit counters | Current and previous billing period in detail, then aggregated |
| Billing and tax records | As required by law (generally 7 years), held by our billing provider |
| Terms acceptance records | Life of the account or guest ID plus 3 years |
| Consent records and audit trail | Life of the account or guest ID plus 3 years, to demonstrate valid consent |
| Consent cookie | 12 months, then we ask again |
| Telemetry and server logs | 90 days |
| Moderation, copyright notices, counter-notices, repeat-infringer records | 3 years after resolution |
| Support communications | 2 years after the last message |
| Backups | 30 days rolling; data deleted from live systems ages out of backups within 30 days |
We may keep data longer where the law requires it or to establish, exercise, or defend legal claims.
7. Your Rights
7.1 Everyone
You can ask us to access, correct, download, or delete your personal data, and you can delete individual Collections yourself in the Service. To request account deletion or exercise any other right, email privacy@sahlware.com from your account email. If you used the Service as a guest, tell us so; we may ask you to send the value of the sahlware_guest_id cookie from the browser you used so we can find your data. We will verify your request, may ask for information to confirm your identity, and will respond within the period required by law (within one month under the GDPR, and within 45 days under U.S. state laws, extendable where the law allows). We will not discriminate against you for exercising your rights.
7.2 EEA, UK, and Switzerland (GDPR / UK GDPR / Swiss FADP)
You have the right to: access your data (Art. 15); rectification (Art. 16); erasure (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing based on legitimate interests (Art. 21); withdraw consent at any time (Art. 7(3)); and not be subject to solely automated decisions with legal or similarly significant effects (Art. 22). You also have the right to lodge a complaint with a supervisory authority, in particular where you live or work — in the UK, the Information Commissioner's Office. We would appreciate the chance to address your concern first.
8. U.S. State Privacy Rights
8.1 California (CCPA/CPRA)
Categories collected in the last 12 months (Cal. Civ. Code §1798.140): identifiers (name, email, account and guest IDs, IP address); customer records (account and billing status); commercial information (plan, subscription, and usage history); internet or network activity (logs and interactions with the Service); and user-generated content (prompts and Collections). Sources, purposes, and recipients are described in Sections 2–4; retention in Section 6. Sensitive personal information: we do not collect it for the purpose of inferring characteristics; account login is handled by Kinde.
Sale and sharing. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We have no actual knowledge that we sell or share personal information of consumers under 16.
Your rights. Know and access; delete; correct; opt out of sale or sharing (not applicable, because we do neither); limit use of sensitive personal information (not applicable, see above); and non-discrimination. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to confirm your identity directly.
How to submit a request. Use either method:
- Email privacy@sahlware.com; or
- Write to Sahlware LLC, Privacy Requests, 33819 NE 52nd Way, Carnation, WA 98014, USA.
8.2 Other U.S. states
Residents of states with comprehensive privacy laws (for example Colorado, Connecticut, Oregon, Texas, Virginia, and others) may have similar rights to access, correct, delete, and obtain a copy of their personal data, to opt out of targeted ads and sales (we do neither), and to appeal our decision by replying to our response. We honor these requests where those laws apply to us, and we offer the same controls to all U.S. users.
8.3 Washington — My Health My Data Act
We do not seek, infer, or share consumer health data as defined in RCW 19.373. If a prompt you write reveals information about your health, we use it only to generate the Collection you asked for and handle it under Sections 3 and 6, and you can delete it at any time. Please do not include health information in prompts.
9. Cookies and Similar Technologies
We use cookies, localStorage, and sessionStorage. Strictly necessary items are always on. We do not use advertising or analytics cookies today. The "Analytics" and "Marketing" categories in Cookie settings are reserved for possible future use and nothing uses them yet; if that changes, we will update this Policy first and ask for your consent where the law requires it. You can review or change your choices in Cookie settings in the Service at any time.
| Name / key | Type | Purpose | Category | Duration |
|---|---|---|---|---|
sahlware_consent |
First-party cookie | Stores your cookie choices | Strictly necessary | 12 months |
sahlware_guest_id |
First-party cookie (domain .sahlware.com) |
Random guest ID so guests keep their Collections and limits | Strictly necessary | 12 months |
sahlware_user_id |
localStorage | Fallback for the same guest identifier when the cookie is unavailable | Strictly necessary | Until cleared |
sahlware_session_id |
sessionStorage | Fallback for the same identifier for the current browser session | Strictly necessary | Browser session |
Kinde sign-in state (including authSuccessData, authErrorData, temp_user_id) |
sessionStorage / localStorage | Completing sign-in and keeping you signed in | Strictly necessary | Session / until cleared |
| Kinde cookies | Cookies set by Kinde on sahlware.kinde.com | Authentication session with our sign-in provider | Strictly necessary | Per Kinde |
| Terms acceptance record | localStorage | Remembers which version of the Terms you accepted so we do not ask again | Strictly necessary | Until cleared |
| Local app state | localStorage / sessionStorage | Keeps work in progress (for example, an edit you are making) between page loads | Strictly necessary | Session / until cleared |
Google Fonts. Our pages load fonts from Google's servers (fonts.googleapis.com), which receive your IP address when the page loads.
Browser signals. Because we do not sell or share personal data or serve targeted ads, there is nothing for a Global Privacy Control or "Do Not Track" signal to switch off. If that changes, we will honor those signals where the law requires.
10. Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has given us personal data, contact privacy@sahlware.com and we will delete it.
11. Security
We use encryption in transit (HTTPS/TLS), encryption at rest provided by Microsoft Azure, access controls and least-privilege credentials, and separation of payment data (handled only by our billing provider). No system is perfectly secure. If a personal data breach occurs, we will notify affected users and regulators as the law requires, including within 72 hours to the lead supervisory authority where the GDPR applies.
12. Changes to This Policy
We will post updates here and change the version and effective date at the top of this page. For material changes we will notify you by email or in the Service before they take effect and ask for consent or acceptance again where the law requires it.
13. Contact Us
Sahlware LLC · 33819 NE 52nd Way, Carnation, WA 98014, USA · Privacy requests: privacy@sahlware.com · General: dailyquotes@sahlware.com · https://dailyquotes.sahlware.com (company site: https://sahlware.com)