Privacy Policy

1. Overview

Day56 ("we," "us," or "our") operates the website at day56.com and the associated platform for ball python breeders. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have regarding your information.

This policy applies to:

• Breeders - individuals who create accounts on Day56 to manage their waitlists and animal collection
• Customers / Waitlist Members - individuals who sign up for a breeder's waitlist through a Day56-powered page
• Visitors - individuals who browse day56.com without creating an account

2. Data We Collect

2.1 Breeder Account Data

When you create a Breeder account, we collect:

2.2 Animal Collection Data

Breeders may add animal records containing name, sex, date of birth, genetic makeup (genes/morphs), weight, price, status, and notes. This data is stored on your behalf and displayed on your public page as configured. You control what is visible publicly.

2.3 Waitlist / Customer Data

When a customer joins a breeder's waitlist, we collect on the breeder's behalf:

This data is collected on behalf of and for the benefit of the individual breeder. The breeder is the data controller for their customer data; Day56 acts as a data processor.

2.4 Email Log and Inbox Data

We store records of emails sent through the platform, including recipient email, subject, body text, send timestamp, and delivery status. This allows breeders to view their sent email history in the dashboard.

When a customer replies to a breeder's email, the reply (sender name, email address, subject, message body, and any attached images) is stored and shown in the breeder's inbox so they can read and respond to it. Breeders may organize these messages into folders. This data is retained under the same terms as other waitlist customer data described in this policy.

2.5 Usage and Technical Data

We may collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This data is used for security, debugging, and improving the Service. We do not use third-party analytics or advertising trackers.

Account activity. We record limited activity information about your account, such as when you last accessed the platform, to operate and support your account, monitor the health of the Service, and detect abuse. Authorized Day56 staff may view this operational activity (for example, whether an account is currently active) solely to run, support, and secure the Service. It is never shown to other breeders or shared with third parties, and is never used for advertising or profiling.

Day56 2.0 usage measurement. When you use Day56 2.0, the app records which screens and tools you use, so we can see what works and decide what to build next. Each record is an event name (for example "opened Sales" or "asked the assistant by voice"), a few fixed details such as the kind of box or whether a question was typed or spoken, the type of device, system and browser, the app version, a random number for the browser tab, and the time. We never record what you type or say, your animals, customers, sales, emails or any other records, or any free text. This measurement is first party: it goes only to Day56's own servers, with no third-party scripts and no extra cookies. Only authorized Day56 admins can see it, including activity for a single account, which we use to support you and to improve the Service. It is never shown to other breeders, shared with third parties, or used for advertising. You can turn it off at any time in Day56 2.0 under Settings, Your data, "Share how I use Day56 2.0". While it is off, nothing is sent from any of your devices. The same place shows how many events we hold for you and lets you delete them.

Public page view analytics. When a public breeder page or clutch invite link is viewed, we record the visit (the breeder, the page, and a timestamp) so breeders can see view counts for their pages. To distinguish unique visitors and detect abuse, the visitor's IP address is stored only in a pseudonymized (irreversibly hashed) form - we do not retain the raw IP address for this analytics purpose. We rely on our legitimate interest (and, for breeders, performance of our contract) in providing page analytics and preventing abuse as the legal basis for this limited processing. No cross-site tracking, advertising, or behavioral profiling is performed.

3. How We Use Your Data

We use the data we collect to:

• Create and maintain your account and public breeder page
• Send transactional emails (account verification, password resets, waitlist confirmations)
• Enable breeders to communicate with their waitlist customers
• Display animal listings and breeder profiles on the explore directory
• Detect and prevent fraud, abuse, and spam
• Provide optional AI-assisted features (such as email drafting, the AI newsletter builder, the Collection Tracker AI command box, and the Day56 2.0 (beta) assistant, voice commands and photo reading) that process your own account data to generate drafts, act on tracker commands and build your dashboard - see Section 4.4 for the AI providers involved and what is shared
• Facilitate optional shed-based genetic testing that you order through our independent lab partner, Rare Genetics Inc. ("RGI") - see Section 4.7
• Improve and maintain the Service
• Comply with legal obligations

We do not use your data for advertising, profiling, or sale to third parties. The AI providers in Section 4.4 receive only what the feature you are using needs. Both act as our processors and may not use your data to train their AI models. They may log it for a limited time to check for abuse, fix reliability problems or meet legal requirements, as Section 4.4 explains.

4. Data Sharing

4.1 Between Breeders and Customers

When a customer joins a breeder's waitlist, that customer's information (name, email, phone, morph interest, notes) is made available to that breeder through their Day56 dashboard. Customers should be aware that the breeder they sign up with will have access to the information they provide.

4.2 Breeder-to-Breeder Referrals

Day56 includes an optional referral feature. A breeder may choose to refer one of their leads or waitlist customers to another breeder on the platform - for example, when they do not produce a morph the customer is looking for. When a breeder does this, that customer's relevant information is shared with the receiving breeder so they can follow up.

This sharing only ever happens at the referring breeder's own initiative. Day56 never transfers, sells, or shares customer data between breeders automatically. If you are a waitlist customer and want to know whether your information has been referred, please contact the breeder you originally signed up with.

Refer-a-Breeder invite links: separately from customer referrals above, breeders can invite other breeders to join Day56 with a personal link. If you create your account through another member's invite link, that member can see your business name, the date you joined, and whether a Pro membership was activated - this is how referral rewards are attributed. No customer or waitlist data is involved.

4.3 Pro Market (Breeder-to-Breeder Marketplace)

Pro Market is an optional marketplace where Pro members can list full clutches, wholesale groups, proven breeders, and equipment to other Pro members. It is only used if you choose to publish a listing.

When you publish a listing, the content you include - title, photos, genetics, sex and quantity, price, description, category, and your state/region if you provide one - is visible to other Pro members inside their Day56 dashboards, together with your breeder/business name and logo. Listings are not public web pages; they are only visible to signed-in Pro members. If you link animals or clutches from your collection to a listing, only the details shown in the listing are shared - not your private husbandry records.

Pro Market includes member-to-member messaging about listings. Messages you send are stored on the platform, delivered to the other breeder inside their dashboard, and may trigger an email notification to them. Message threads are retained so both parties keep their conversation history; no customer or waitlist data is ever included automatically.

Listings are shared entirely at your own initiative - you can archive or delete a listing at any time, which removes it from the marketplace feed. Any sale agreed through Pro Market is conducted directly between the two breeders off-platform: Day56 processes no payments for Pro Market and never shares payment details between members.

4.4 Service Providers

We use the following infrastructure providers to operate Day56:

• Amazon Web Services (AWS) - cloud hosting, database, file storage, and content delivery (CloudFront); data is stored on AWS servers in the United States
• Hostinger - email delivery (sending and receiving transactional and customer emails)
• PayPal - processes Day56 Pro membership subscriptions. When you upgrade, your payment is handled on PayPal's own systems under PayPal's privacy policy; Day56 receives only the subscription status and identifier needed to activate and renew your membership. We never receive or store your card or bank details.
• Google Fonts - web font loading. No account data is shared, but because fonts are requested from Google's servers your browser's IP address and user-agent are visible to Google as part of that request.
• Discord - internal notifications via webhook (no customer data included)
• Google (Gemini API) - powers optional AI features: email drafting and rewriting, the AI newsletter builder, the Collection Tracker AI command box (husbandry & breeding), natural-language collection search, and, if you join the Day56 2.0 beta, its dashboard assistant and photo reading. When you use one of these features, only the data that feature needs is sent to Google to produce the result: for drafting and newsletters, the draft or prompt text you write; for the tracker command box (which also handles care commands you give the Day56 2.0 assistant), a list of your own animals (name, ID, sex, status, weight, genes, tags and how recently each was fed or weighed) so it can find the ones your command refers to; for search, only the words you type; for the Day56 2.0 assistant, the words you type or say and your last few messages in the same conversation, today's date, and the layout of your dashboard (the names of your panels, the names and types of the boxes on them, and how an answer on screen is set up), never your records, customers or sales; and for photo reading (Pro: a scale display, a receipt or a cage label you choose to photograph), that photo, which is read once to fill in a form for you to check and is not stored by Day56. These features do not send your customers’ or waitlist applicants’ personal information unless you type it in yourself. We use Google's paid Gemini API service. Google processes this data as our processor under its Data Processing Addendum and does not use it, or the replies it generates, to improve its products or AI models. Google logs it for 55 days, only to detect and prevent abuse and to make disclosures the law requires, and authorized Google staff may review it for those purposes.
• Groq - fallback AI provider for the features above, the AI behind the in-dashboard help chat, and speech-to-text for voice commands in the Day56 2.0 beta (Pro): when your browser has no built-in speech recognition, or you choose Day56 transcription, the short audio clip you record is sent to Groq to be transcribed and is not stored by Day56. (When your browser's own speech recognition is used instead, your browser's maker handles that audio under its own terms.) When Groq stands in for Google it receives the same data described above. Under Groq's terms it may not use your data to train its models; it does not keep it by default, though it may log it for up to 30 days to fix reliability problems or investigate abuse.
• Stripe and Square - optional, and only if you connect your own account to take payments in the Day56 2.0 (beta) point of sale. Card payments are processed by that provider on your own account under its own terms and privacy policy. Day56 stores your connection credentials encrypted, plus the sale and payment records, and never receives or stores card numbers. Payments you record by hand (cash, Venmo, Zelle, Cash App, PayPal.me) stay in Day56 only.

These AI providers act as our processors, are US-based, and are used only when you choose to use an optional AI feature. We do not use third-party CRM, advertising, or marketing platforms.

The Day56 2.0 beta. Joining the Day56 2.0 beta is optional and only happens when you choose to: from the offer on your classic dashboard, or by asking for access in Day56 2.0. We record that you joined or asked, when, and any note you add, so we can manage access, and our admins see your request. Day56 2.0 uses the same account data as classic Day56 and keeps the panels you build there with your account. Its AI features send data only when you use them, as described above. We also measure how Day56 2.0 is used, as described in Section 2.5, and you can switch that off in 2.0 Settings.

4.5 Legal Disclosure

We may disclose your information if required to do so by law, court order, or other governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.6 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, personal data may be transferred as part of that transaction. We will notify affected users via email prior to data being transferred.

4.7 Genetic Testing Partner (Rare Genetics Inc.)

Day56 offers an optional feature that lets breeders order shed-based genetic testing through an independent laboratory partner, Rare Genetics Inc. ("RGI"). This feature is used only if you choose to place a testing order - it is never automatic.

When you place an RGI test order, we share the following with RGI so they can process it: your order details (order number and the tests ordered), the animal name and the ID/label assigned to each animal being tested, and your contact email and breeder/business name. You mail the physical shed sample to RGI directly; results are returned digitally to your Day56 collection tracker.

Payments for RGI testing go directly to RGI and are processed by RGI's own payment processor (Stripe) on RGI's own account. Day56 does not receive, handle, or store your payment card details for these orders, does not set the testing price, and takes no commission from the payment. If you apply a discount code, it is validated against RGI's payment provider at checkout.

RGI is an independent business and acts as its own controller of the data you submit to it for testing; RGI's handling of that data is governed by RGI's own terms and privacy practices. Because a test order concerns your own animals, please do not include other people's personal information (for example, a customer's contact details) in a testing order.

5. Email Communications

5.1 Transactional Emails

Day56 sends transactional emails from noreply@day56.com for account verification, password resets, and waitlist confirmations. These are required for the Service to function and cannot be unsubscribed from while your account or waitlist membership is active.

5.2 Breeder-to-Customer Emails

Breeders may send emails to their waitlist customers using Day56's email tools. All such emails are sent on behalf of the breeder. Every breeder email includes an Unsubscribe link. Clicking this link removes you from that breeder's waitlist and stops all future emails from them through Day56.

Reply-to addresses in breeder emails are set to the breeder's personal email address, not Day56's. When you reply to a breeder email, your reply goes directly to the breeder.

5.3 CAN-SPAM Compliance

Marketing emails sent through Day56 are sent on behalf of the breeder, who is the "sender" under the CAN-SPAM Act. Day56 supplies and maintains a valid physical postal mailing address on behalf of its breeders - 952 Winchester Rd #1028, Lexington, KY 40505 - and automatically includes it in the footer of every marketing email, alongside accurate sender identification, a clear subject line, and a working unsubscribe mechanism honored promptly. Because Day56 provides this address, breeders are not required to supply their own. Day56's own transactional emails identify Day56 as the sender.

6. Data Retention

• Breeder accounts: Retained until you delete your account. Deleting your account removes your profile, public page, animals, collection-tracker records (feeding, weight, health and breeding logs), customers, orders, automations, marketplace listings and email history from our live systems. A small number of records are deliberately kept: our internal administrative audit log (retained for security and accountability, and not shown to other breeders), and records we are required to keep by law or that are held by an independent provider under its own policies (for example a genetic-testing order already placed with RGI - see Section 4.7).
• Deleted animals ("Recently Deleted"): When you delete an individual animal, it moves to a Recently Deleted area so you can restore it, and is purged after 30 days. Deleting your whole account removes these pending records immediately rather than waiting out the 30 days.
• Encrypted backups: Deletion takes effect immediately in the live database, but our routine encrypted database backups are kept for up to 7 days for disaster recovery, so a copy of deleted data can persist in those backups for a short period before ageing out. Occasional snapshots taken before major maintenance may be held longer and are deleted once they are no longer needed. Backups are restored only to recover from a failure, never to repopulate a deleted account.
• Waitlist customer data: Retained as long as the associated breeder account is active, or until the customer unsubscribes or the breeder deletes their records. Customers removed (unsubscribed) are marked as removed and excluded from communications, but their record may remain in the breeder's history.
• Email logs: Retained as long as the breeder account is active and deleted when the account is deleted.
• Server logs: Retained for up to 90 days for security purposes.
• Day56 2.0 usage events: Kept for up to 13 months, then deleted. After that we keep only daily totals (for example, how many breeders opened Sales on a given day) that are not linked to any account. Deleting your account, or deleting your usage data in Day56 2.0 Settings, removes the events tied to you; daily totals that were already counted stay.
• Day56 2.0 AI usage records: For each assistant, photo or voice request we record counts, timings and the amount of text processed, never your words or images. These records are kept for 180 days, then only as daily totals that are not linked to any account.

7. Security

Day56 takes reasonable measures to protect your data, including:

• All passwords are hashed using bcrypt with a cost factor of 12 - we never store plain-text passwords
• All data is transmitted over HTTPS (TLS encryption)
• Session tokens are stored securely and expire on logout
• Password reset tokens expire after 1 hour and are single-use
• API endpoints require authentication and validate breeder ownership of all data
• Optional two-factor authentication (authenticator app) is available on Breeder accounts, with single-use backup codes stored only as hashes
• Particularly sensitive stored values - such as two-factor secrets and third-party API credentials - are encrypted at rest using authenticated encryption (libsodium), with the encryption keys held on the server outside the database, so a database copy alone cannot reveal them
• The database itself is encrypted at rest using AWS KMS-managed keys, and HTTPS is enforced platform-wide (HSTS)
• We run periodic security reviews of the codebase and fix issues we find

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

8. Your Rights

8.1 Breeder Rights

As a Breeder, you can:

• Access: View all your data through the dashboard at any time
• Correct: Update your profile, animals, and customer information at any time
• Delete: Delete your account and its data from Settings → Delete my account. This is immediate and cannot be undone - see Section 6 for exactly what is removed and how backups are handled
• Export: Download a machine-readable copy of your account data (profile, animals, customers, and email history) from your dashboard, or request one from us at privacy@day56.com. Animal collection data can also be exported to CSV
• Object or restrict: Ask us to stop or limit a specific optional processing activity (for example the AI features, referral sharing, or Day56 2.0 usage measurement) by emailing privacy@day56.com. You can also switch off Day56 2.0 usage measurement yourself in Day56 2.0 Settings, Your data.

8.2 Waitlist Customer Rights

As a waitlist customer, you can:

• Unsubscribe: Click the unsubscribe link in any email to be removed from that breeder's waitlist immediately
• Request deletion: Email us at privacy@day56.com to request removal of your data from our systems
• Access your data: Contact us to request a copy of what data we hold about you

8.3 California Residents (CCPA/CPRA) - Your Privacy Choices

California residents have additional rights under the CCPA/CPRA: the right to know what personal information is collected, the right to delete it, the right to correct it, the right to non-discrimination for exercising these rights, and the right to opt out of the "sale" or "sharing" of personal information.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use third-party advertising, profiling, or marketing platforms, so there is no advertising "sale" or "share" to opt out of.

Your information may be passed to another party only in circumstances you initiate: the optional breeder-to-breeder referral described in Section 4.2, and the optional genetic testing described in Section 4.7 (where your order and animal details are sent to our lab partner RGI only when you place a test order). Neither is a sale of personal information or an advertising "share." If you do not want your information referred to another breeder, email privacy@day56.com or tell the breeder you signed up with, and we will honor that request.

To exercise any of these rights, contact us at privacy@day56.com. We will not discriminate against you for doing so.

8.4 Who Controls What, and International Users

Two different roles. For a Breeder's own account information, Day56 is the controller - we decide how it is used, as described in this policy. For the customer and waitlist information a Breeder uploads or collects, the Breeder is the controller and Day56 acts as their processor: we store and process it on that Breeder's instructions and do not use it for our own purposes. That means the Breeder is responsible for having a lawful basis to collect those contacts, for the accuracy of what they upload, and for responding to their own customers' requests. Our Data Processing Agreement sets out these obligations in full and forms part of this policy for breeders who need one.

Where your data lives. Day56 is operated from the United States and all data is stored on servers in the United States. If you access Day56 from outside the US, you are sending your information to the US, where privacy laws differ from those in your country.

If you are in the UK or the EEA, we rely on these legal bases: performance of a contract (running your account and the Service you asked for), legitimate interests (securing the platform, preventing abuse, basic page and email measurement, measuring how Day56 2.0 is used, and improving the Service), consent (optional features you choose to switch on, such as the AI assistant), and legal obligation (tax, accounting, and lawful requests). You have the right to access, correct, erase, restrict, object to, and port your personal data, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority. Where we transfer personal data out of the UK/EEA we do so under appropriate safeguards, including the European Commission's Standard Contractual Clauses. Contact privacy@day56.com to exercise any of these rights; we respond within the timeframes the applicable law requires.

9. Cookies, Tracking, and Email Analytics

Day56 uses only essential cookies necessary for the operation of the Service:

• Session cookie: Used to keep you logged into your Breeder account. Expires on logout or after an inactivity period.
• No advertising cookies: We do not use cookies for advertising, tracking across sites, or behavioral profiling.
• No third-party analytics: We do not use Google Analytics, Facebook Pixel, or similar tracking scripts.
• Browser storage: Day56 2.0 keeps your layout, theme and similar settings in your browser's local storage so it opens quickly and works offline, and a random number for each browser tab in session storage so usage events can be grouped into visits (see Section 2.5). This storage is first party and is never read by third parties. When you sign out, your layout and the tab number are cleared from the device; only device preferences such as voice settings stay.

9.1 Email Open and Click Measurement

So that breeders can tell whether their announcements are reaching people, marketing emails sent through Day56 include two standard measurement mechanisms. We want to be specific about them rather than describe Day56 as tracking-free:

• Open measurement. Breeder marketing emails contain a small (1×1 pixel) transparent image hosted by Day56. If your email program loads remote images, we record that that particular message was opened and the time of the first open. This is linked to the message we sent you, so it is tied to your email address. If your email program blocks remote images - many do by default - no open is recorded.
• Click measurement. Links inside breeder marketing emails are routed through a Day56 redirect address so we can count clicks before sending you on to the destination. For clicks we store only the destination link, the sending breeder, and a timestamp - the click record does not store which recipient clicked.

These measurements are visible only to the breeder who sent the email (as aggregate open and click counts) and to Day56 for operating and troubleshooting the email system. They are never sold, never shared with advertisers, never used to build a profile of you, and never combined with data from other websites. Day56's own transactional emails (verification, password reset, receipts) are functional messages and are not used for marketing measurement.

Your choices: configure your email program to block remote images to prevent open measurement; avoid the tracked link by visiting the breeder's page directly; or use the Unsubscribe link in any breeder email to stop receiving them altogether. Public page view analytics are described separately in Section 2.5.

10. Children’s Privacy

Day56 is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information. If you believe we have collected information from a child under 13, please contact us at privacy@day56.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify Breeder account holders via email and update the "Last updated" date at the top of this page. Your continued use of Day56 after changes become effective constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us:

• Email: privacy@day56.com
• Website: day56.com

We aim to respond to all privacy-related inquiries within 5 business days.