GDPR

For your account data (your name, email, billing details), Pradsgaard Labs EMV is the data controller.

For the subscribers you import and the sending events tied to them, you are the controller and day3 is your processor — we process those contacts only to deliver your campaigns and report on them, on your instructions.

day3 runs entirely within the European Union, on Vercel and Supabase in EU regions. Your data and your subscribers' data are stored and processed in the EU. See the full list on the sub-processors page.

• Contract — to provide the service you sign up for and bill you for it.
• Legitimate interests — to keep day3 secure, deliverable, and free of abuse.
• Your instructions — for the subscriber data you bring, which we process as your processor under the DPA.

Anyone whose personal data we process can access, correct, export, restrict, or delete it, and object to processing. For your own account data, email hello@day3.app and we'll act within the time limits the GDPR sets.

If a request reaches us about one of yoursubscribers, we'll forward it to you as the controller and help you respond.

Right to erasure isn't a support ticket here — it's a button. Deleting your organisation permanently erases everything it owns: subscribers, campaigns, imports, forms, domains, senders, email events, and the uploaded files behind them, along with the sending identities we created for you. There is no grace window and no undo.

One thing survives on purpose: the record that someone unsubscribed or reported spam. Keeping those means a deleted account can never cause us to email a person who opted out — a duty that outlives the account.

Our core processing happens inside the EU, so there is no routine transfer of personal data outside it. Where any supporting tool would involve a transfer, we rely on an adequacy decision or Standard Contractual Clauses, and we list every sub-processor so you can see exactly who is involved.

Need a Data Processing Agreement for your records? Ours is published in full on the DPA page. If your organisation needs it countersigned, email hello@day3.app.

Questions about how day3 handles personal data go to hello@day3.app. Pradsgaard Labs EMV is based in Copenhagen, Denmark.