Legal
Privacy
Last updated 6 November 2026
What happens to the files your company backs up, and to the details of the people who manage them, in plain words.
- 01
Who we are
DailyDone Enterprise Backup is a DailyDone product run by Dalysie AS, a company registered in Norway. You can reach us about privacy at support@getdailydone.com.
- 02
Your company decides, we carry it out
For the files your company backs up, your company is the data controller. It decides which devices and folders are backed up, how often and for how long. Dalysie AS processes those files on its behalf, only to store them, keep them for as long as its backup plans say and restore them when its admins ask.
For the accounts of the people who sign in, this website and messages sent to us, Dalysie AS is the controller.
- 03
What the agent backs up
The agent on each laptop or server backs up what the company’s plan chooses: the whole computer, the user folders of everyone who signs in, or named folders. That includes the contents of the files and their names, folders, sizes and dates, so they can be found and restored.
Each file is fingerprinted on the device before upload, so content the company already holds is not sent again. We do not look at the contents of backed-up files. They are stored and returned, nothing more.
About each device we keep its name, operating system, agent version, when it last checked in and the result of each backup, so the console can show what is protected.
- 04
Where it is kept
Backup copies are stored in the EU, on Backblaze B2 in its EU Central region, and are encrypted at rest. Data travels between the agent, the console and storage over encrypted HTTPS connections.
The service itself runs on Microsoft Azure in the EU (Sweden). The agent holds no storage password or key: it asks for a short-lived link for each upload, so a device cannot read or delete the backups already made.
- 05
Accounts
To sign in you need an account. We keep your email address, your name, a securely hashed password if you set one, and, if you use two-step sign-in, its encrypted secret and one-time recovery codes. If your company uses single sign-on, your company’s identity provider confirms who you are and we do not see your password.
It is the same account as other DailyDone products, so one sign-in works across them. Your company’s admins can see your name, email address, role and when you were last active.
- 06
The activity log
Changes in the console, such as adding or removing devices, editing plans and every restore or download, are written to the company’s activity log with who made the change and the IP address it came from. Company admins can read it. Enrol keys and download links are never written to it. We also keep a security record of sign-ins and password changes.
- 07
How long it is kept
Backups are kept for as long as your company’s backup plans say. Older restore points are removed automatically, except locked ones, which stay until their lock ends.
Removing a device or a backup set in the console deletes its backups. When your company closes its account, we delete its backups. Your account is kept until you ask us to delete it. Messages you send us are kept for as long as we need them to answer you.
- 08
Cookies and browser storage
When you sign in, the service sets one secure, httpOnly cookie that keeps you signed in. It is used only for that. This site has no analytics or advertising cookies.
Your browser also remembers a few small things for you: light or dark theme, the company you last chose, and where to return after signing in with SSO. They stay in your browser. The check on the sign-up form runs in your browser and sets no cookie.
- 09
Who else is involved
We use a small number of providers to run the service, such as Backblaze for storage and Microsoft Azure for hosting. They act on our instructions and are listed, with what each one does, on the subprocessors page. We do not sell personal data or use it for advertising.
- 10
Legal basis
Where the GDPR applies, we process your company’s backups on its instructions, under its agreement with us. For accounts we rely on that agreement and on our contract with you to provide the service. For security records and preventing abuse we rely on our legitimate interest in keeping the service safe. Some records are kept because the law requires it, such as accounting records.
- 11
Your rights
If your files or details are in a company’s backups, ask that company first: it decides what is backed up and can act on your request. We help it do so.
For your own account you can ask for a copy of your data, ask us to correct it, or ask us to delete it, by emailing support@getdailydone.com. If you are in the European Economic Area you can also complain to your data protection authority. In Norway that is Datatilsynet.
- 12
Changes to this notice
When we change this notice in a way that matters, we update the date at the top and, where it makes sense, tell your company’s admins.
- 13
Contact
Questions about privacy or this notice? Email support@getdailydone.com.