Last updated: March 2026
When you create an account we collect your name, email, and password (stored as a secure hash — we never see your actual password). We also store the data you create in Duskbook: clients, projects, invoices, contracts, proposals, files, and messages.
We do not collect your payment card details — those go directly to Stripe. We do not sell your data to anyone. We do not use advertising trackers or third-party analytics. We do not read your messages or files.
You are the data controller for your clients' information. Duskbook acts as a data processor on your behalf. Your clients' data is stored in Supabase (SOC2 Type II certified, GDPR compliant, hosted on AWS).
To provide the Duskbook service, send transactional emails such as invoice sent or contract signed notifications, send product updates which you can unsubscribe from at any time, respond to support requests, and improve the product.
Stripe processes payments. Supabase hosts our database. DocuSign processes electronic signatures. Resend sends transactional emails. We only share data with third parties where necessary to provide the service.
Your data is retained while your account is active. If you cancel, your data is kept for 90 days before deletion. You can request immediate deletion at any time by emailing hello@duskbook.com.
All data is encrypted in transit and at rest. We use Row Level Security in our database so users can only access their own data. We run daily automated backups.
If you are based in the EEA, you have the right to access, correct, export, or delete your personal data. Email hello@duskbook.com and we will respond within 30 days.
California residents may exercise their rights under the CCPA by contacting hello@duskbook.com. We do not sell personal information.
We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.
Questions about privacy? Email hello@duskbook.com