Data protection

Privacy policy

This policy explains what personal data may be processed in connection with the website, the account and the use of DalyTrac.

1. Who is responsible for your data?

The data controller is BME SRL, located at 127-129 Rue Colonel Bourg, 1140 Brussels (Belgium), registered with the Crossroads Bank for Enterprises under No. 0823.758.741 (VAT BE 0823.758.741).

Contact for any data protection questions: support@dalytrac.com.

2. What data do we use and why?

The table below details the use of personal data collected when using the DalyTrac website and services.

Journey	Data concerned	Purpose	Legal basis	Duration
Contact or information request	Name, email, telephone, message	Responding to the request and following it up	Legitimate interest	3 years from the last contact
15-day free trial, no commitment	Identity, business contact details, company, time zone	Creating the account, providing access and supporting the trial	Pre-contractual measures / contract	3 years after the end of the trial period
Account and company	Login credentials (encrypted password), company, team members, roles, access logs	Creating, administering and securing the account and workspace	Performance of the contract	Duration of the business relationship + 3 years
Subscription and payment	Billing details, subscription history, Stripe transaction references	Processing the subscription and secure payment, issuing invoices and meeting accounting obligations	Contract & legal obligation	7 years (statutory accounting retention period)
Invoicing and projects	Clients, contacts, quotes, invoices, tracked time and expenses entered in the application	Providing the management service: projects, time tracking, documents and reports	Performance of the contract	Duration of the business relationship + 3 years
Technical support	Email, screenshots, support messages, response history	Diagnosing and handling technical support requests	Legitimate interest	3 years after the ticket is closed
Security and audience measurement	IP address, technical logs, strictly necessary cookies	Ensuring website security and preventing intrusion attempts	Legitimate interest	13 months maximum for cookies

3. What information must you provide?

Information marked as mandatory in our forms (particularly when creating an account, placing an order or requesting a trial) is necessary to perform the subscribed service or respond to your request. Failure to provide this data may prevent order validation or account creation.

4. Who may receive your data?

Access to your personal data is strictly limited to the DalyTrac internal team and authorised technical providers: (hosting, payment processing by Stripe, transactional messaging tools), payment processing by Stripe and sending transactional emails.

Your data is never sold or rented to third parties.

5. Does your data leave the European Economic Area?

Your data is primarily hosted and processed within the European Union. If an intermediate technical provider (for example for payment or email sending) carries out a transfer outside the EEA, that transfer is covered by appropriate safeguards (European Commission adequacy decision or standard contractual clauses).

6. How long do we keep your data?

Retention periods are strictly proportionate to the purposes pursued (see table above: for example 7 years for accounting, 3 years for prospects and contacts). When these periods expire, data is either deleted or anonymised.

7. What are your rights?

Under the GDPR and Belgian law, you have a right of access, rectification, erasure, restriction of processing, portability and objection to the processing of your data.

To exercise your rights, contact us at: support@dalytrac.com.

You also have the right to lodge a complaint with the Data Protection Authority (GBA Belgium).

8. How do we protect your data?

DalyTrac implements appropriate technical and organisational measures: encryption of exchanges (HTTPS), encrypted passwords, strict role-based access control and secure hosting, to guarantee the security and confidentiality of your personal data.

9. Updates to this policy

This privacy policy may be updated to adapt to legal and technical developments.

Last updated: 25 September 2026.