Day Interpreting
Privacy

Privacy Policy

How Day Translations, Inc. (d/b/a Day Interpreting) collects, uses, shares, and protects your information when you use the Service across our portal, mobile apps, IVR phone line, Zoom App, Webex Embedded App, ChatGPT app, and future meeting-platform or AI-assistant integrations.

Effective June 20, 2026

This Privacy Policy describes how Day Translations, Inc., doing business as Day Interpreting (“we,” “us,” or “our”), collects, uses, shares, and protects information when you use our on-demand interpretation services through the Day Interpreting customer portal (app.dayinterpreting.com), our mobile applications, our Zoom App (Day Interpreting), our Webex Embedded App (Bridge Interpreter), our toll-free IVR phone service, and our Day Interpreting app inside OpenAI's ChatGPT (collectively, the “Service”).

Day Translations, Inc. is the data controller responsible for the personal information processed through the Service. Contact details are at the bottom of this page.

1. Information we collect

1.1 Information you provide

  • Account information — name, email address, password (stored as a one-way hash), company or organization name, phone number, country, preferred languages, and billing address.
  • Payment information — your card details are entered directly into Stripe's PCI-compliant Elements and are never received or stored by us. We retain only the last four digits, expiry month/year, card brand, and a Stripe customer reference for future charges (when you authorize them).
  • Support communications — tickets you submit, messages you exchange with our support team, call ratings and feedback you provide after a call.

1.2 Information generated by your use of the Service

  • Call metadata — date and time of each call, the language requested, duration, billed amount, interpreter identifier, call type (over-the-phone, video remote interpreting, meeting bridge), the originating channel (web, IVR, Zoom App, Webex App), and an end reason (e.g. completed, missed, cancelled).
  • Meeting bridge data — when you use our Zoom App, Webex Embedded App, or portal “Bridge Interpreter” feature to send an interpreter into your meeting, we collect the dial-in number you entered, a masked form of your meeting access code (only the last four digits are retained in logs), and whether a numeric passcode was provided. We do not store the passcode itself; it is sent to your meeting bridge as DTMF tones and discarded.
  • Call recordings — recordings are only created if you explicitly enable them. When enabled, all participants are notified at the start of the call.
  • Technical information — IP address, browser type, device type, operating system, time-zone, and the actions you take in the portal (which we keep in an audit log to help with security and dispute resolution).

1.3 Information from third-party integrations

When you use Day Interpreting through a third-party meeting platform (such as Zoom, Cisco Webex, Microsoft Teams, Google Meet, or any future platform integration), that platform's SDK may pass us limited context about your current meeting and your identity within it. We use this information solely to operate the interpreter-bridge feature and do not retain platform-provided context beyond the duration of the call.

  • Zoom Apps SDK — when you open our Zoom App inside a Zoom meeting, the Zoom client passes us the meeting ID, meeting topic, and basic user context (your display name and role in the meeting). We use this only to dial the interpreter into the correct meeting and to greet you by name. We do not read Zoom chat, contacts, recordings, polls, or analytics.
  • Webex Embedded Apps SDK — when you open our Bridge Interpreter app inside a Webex meeting, the Webex client passes us the meeting's internal identifier and meeting title. The numeric dial-in access code and numeric meeting passcode (if any) are entered by you manually because the Webex SDK does not expose them.
  • Microsoft Teams and Google Meet — if and when we publish Day Interpreting apps to Microsoft AppSource or Google Workspace Marketplace, the same principle applies: we accept only the minimum meeting and user context required to bridge an interpreter into your meeting and we do not access messages, files, calendars, or other content in those ecosystems unless you explicitly authorize it for a specific feature.
  • OpenAI ChatGPT (Apps SDK) — when you connect our Day Interpreting app inside ChatGPT, OpenAI's ChatGPT client (acting as our authorized client through the OAuth 2.0 authorization-code flow with PKCE) passes us your account identifier and the action you requested (for example “look up languages,” “check my balance,” or “call a Spanish interpreter at this number”). We return only the data needed to fulfill that request — language availability, your current balance, recent call summaries, or the connection status of a new interpreter call. We do not send OpenAI the content of your interpreter calls, your payment card details, or any data not directly responsive to the action you requested. Your conversation with ChatGPT is governed by OpenAI's own privacy policy at https://openai.com/policies/privacy-policy. You can revoke our ChatGPT app's access at any time from your ChatGPT settings.
  • Google or third-party sign-in — if you sign in using Google or another single-sign-on provider, we receive your name and email address. We do not access your contacts, calendar, drive, or any other data held by that provider.

2. How we use information

  • To provide on-demand interpretation services and route your call to a qualified interpreter.
  • To bill you accurately for usage and apply credit-card or invoice payments.
  • To monitor and enforce per-call budgets so you are not billed beyond the limit you set.
  • To investigate suspected fraud, abuse, or violations of our Terms of Use.
  • To improve the Service — for example by reviewing aggregated call ratings or detecting bridge-bridge connection failures.
  • To send account, billing, and service-availability notifications by email or text. Marketing email is sent only with your explicit opt-in and you can unsubscribe at any time.
  • To comply with applicable law, valid legal process, and tax recordkeeping requirements.

We do not sell your personal information. We do not use call content for advertising. We do not train artificial-intelligence models on identifiable customer data.

3. Who we share information with

We share information with the following service providers only as needed to operate the Service. Each provider is contractually required to protect your information and to use it only on our instructions.

  • Boostlingo — language-services platform. Receives the requested language pair, your account identifier, and call connection metadata so an interpreter can be assigned and routed to your call.
  • Twilio — voice and SMS infrastructure. Processes the audio of your calls in real time and stores call- detail records (CDRs). Twilio is HIPAA-eligible under a Business Associate Agreement.
  • Stripe — payment processing. Receives the card data you enter into the checkout form and the charge requests we initiate.
  • Supabase (PostgreSQL + Auth) — our cloud database and authentication provider. Hosts your account record, call history, and other application data in encrypted form.
  • Resend — transactional email delivery for receipts, password resets, support replies, and similar communications.
  • FreshBooks — invoicing and bookkeeping for prepaid receipts and NET-15/30 customer invoices.
  • Cloudflare — content delivery and a proxy in front of our customer-record-management system.
  • Vercel — hosting for our customer portal and embedded apps.
  • Third-party meeting platforms — when you use Day Interpreting inside a meeting hosted by Zoom Video Communications, Inc., Cisco Systems, Inc. (Webex), Microsoft Corporation (Teams), Google LLC (Meet), or any other platform we may integrate with in the future, your interaction passes through their meeting infrastructure. Their respective privacy policies govern data they collect directly through their own clients.
  • OpenAI, OpC LLC (ChatGPT) — when you use our Day Interpreting app inside ChatGPT, the OpenAI ChatGPT client relays your requests to our servers and renders our responses back to you. OpenAI's servers act as the transport for that request/response pair and may log connection metadata under OpenAI's own privacy policy. We do not send OpenAI your interpreter call audio, recordings, transcripts, or payment card data.

We may also disclose information to legal authorities or third parties when required by valid legal process (such as a subpoena or court order) or where disclosure is necessary to protect the rights, property, or safety of any person.

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of the transaction; the acquiring party will remain bound by the commitments in this Privacy Policy or provide notice and a meaningful opportunity to opt out.

4. How long we keep information

  • Account profile and billing records — for the life of your account, and for up to seven (7) years after account closure to comply with U.S. tax and accounting recordkeeping requirements.
  • Call metadata (timestamps, language, duration, cost) — seven (7) years.
  • Call recordings — thirty (30) days, or until you request deletion, whichever comes first. Recordings are created only when you opt in.
  • Support tickets and message history — three (3) years.
  • Server access logs and security audit trails — twelve (12) months.
  • Marketing-email engagement (opens, clicks) — twenty-four (24) months.

5. Your choices and rights

You can review and update most of your account information at any time from Settings in the customer portal. To exercise any of the rights below, email interpreting@daytranslations.com. We will verify your identity before acting on the request and will respond within thirty (30) days.

  • Access — request a copy of the personal information we hold about you.
  • Correction — ask us to fix inaccurate information.
  • Deletion — close your account and have your personal information deleted, subject to the retention obligations in section 4.
  • Portability — export your call history and billing records in CSV format from the portal.
  • Opt-out of marketing — every marketing email contains an unsubscribe link, and you can also turn marketing off in Settings → Preferences.
  • Remove integrations — uninstall the Day Interpreting Zoom App at any time from the Zoom client's Apps panel or from the Zoom Marketplace at marketplace.zoom.us/user/installed. Uninstalling immediately revokes the app's access to your Zoom account; your Day Interpreting customer account stays intact. The Webex Embedded App can be removed from the Webex client's Apps panel; an admin can also disable it organization-wide from Webex Control Hub. The Day Interpreting app inside OpenAI ChatGPT can be disconnected at any time from your ChatGPT Settings → Connectors; doing so immediately revokes ChatGPT's OAuth access token, after which ChatGPT can no longer call our servers on your behalf.

For EU, UK, and Swiss residents (GDPR)

You have additional rights under the EU/UK GDPR including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority. The legal bases on which we rely are contract performance (delivering the Service), legitimate interests (operating, improving, and securing the Service), legal obligation (tax and accounting law), and consent (marketing). Transfers of personal data out of the EEA/UK/Switzerland are covered by the European Commission's Standard Contractual Clauses.

For California residents (CCPA / CPRA)

You have the right to know what personal information we have collected, the right to delete it, the right to correct it, and the right to opt out of sale or sharing for cross-context behavioral advertising. We do not sell personal information and we do not share it for cross-context behavioral advertising. You also have the right to be free from discrimination for exercising any of these rights.

6. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information.

  • All connections to the portal and embedded apps use TLS 1.2 or higher.
  • Database storage is encrypted at rest by our cloud provider.
  • Passwords are stored as one-way bcrypt hashes; we never see plaintext passwords.
  • Access to production systems requires multi-factor authentication and is logged in an audit trail.
  • Payment data is handled by Stripe under PCI DSS Level 1.
  • We operate under HIPAA-aware procedures. A Business Associate Agreement (BAA) is available on request for covered entities and business associates; contact us to start the BAA process.

No method of electronic transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a personal-data breach affecting you, we will notify you and, where required, applicable regulators without undue delay.

7. Children

The Service is intended for use by adults age 18 or older in a professional context (healthcare, legal, business). It is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or under 16 in the EEA/UK). If we become aware that we have collected personal information from a child without verifiable parental consent, we will promptly delete it.

8. International transfers

We operate the Service from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may offer a different level of data-protection law than your country. Where required, we rely on the European Commission's Standard Contractual Clauses (or equivalent mechanisms) for transfers from the EEA, UK, and Switzerland.

9. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy at this URL with a new effective date and, where appropriate, notify you by email or through a notice in the portal at least thirty (30) days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact us

If you have questions about this Privacy Policy or our handling of your information, contact us at: