Privacy Policy

Daily Labs LLC owns and operates PacketLink. This policy describes how we handle information when you use the website, an owner account, or a contractor magic link.

Who we are

Daily Labs LLC is the controller of personal information processed for PacketLink. The owner who invites a contractor is independently responsible for their own hiring records and tax files.

Information we collect

• Owner account data: name, business name, email, password hash, and billing identifiers from Stripe.
• Contractor records the owner types: name and email.
• Uploaded W-9 and insurance files (PDF, JPEG, or PNG) and the insurance expiry date someone confirmed.
• File metadata only: filename, content type, size, and uploaded time. We do not extract SSN or EIN.
• For insurance certificates only, we may read the PDF text layer in memory to suggest an expiry date. The contractor confirms or corrects it. We do not parse W-9s.
• Magic-link token hashes, reminder send logs, and basic server logs (IP address, user agent) for security.

Sensitive tax IDs

W-9 files typically contain Social Security numbers or employer identification numbers. We store the file in private object storage and do not OCR it or copy tax IDs into database fields. Downloads go through an authenticated app route and are limited to the owning workspace or the current magic-link guest for that contractor.

How we use information

We use information to operate the file cabinet, send magic-link and best-effort reminder emails, process subscriptions, keep the service secure, and comply with law. We do not sell personal information. We do not use uploaded documents to train public AI models.

Sharing

We share information with service providers that host the application, database, email (Resend), payments (Stripe), and private file storage (S3-compatible). They process data on our instructions. We may disclose information if required by law or to protect the service and its users.

Retention

We keep owner and contractor records until the owner deletes them or closes the account, and for a limited period afterward if we must retain logs for security or legal reasons. Deleting a contractor removes their stored files from object storage on a best-effort basis.

Security

Files are stored privately (no public ACLs). Magic links are long, random, and hashed at rest; resending revokes the prior token. No method of transmission or storage is perfectly secure. You should restrict owner-account access and treat magic links as secrets.

Your choices

Owners can update their business name, export a CSV of contractor status (never SSN/TIN), archive or delete contractors, and request account deletion. Contractors can use the current magic link to replace the files they uploaded. To make a privacy request, contactDaily Labs LLC through the method published on the PacketLink site.

Children

The service is for business use and is not directed to children under 16.

Changes

We may update this policy by posting a new version with a new "last updated" date.