Effective date: 31 August 2026
Privacy policy
How Dawn AI ApS collects, uses, and protects personal data when you use Dawn.
Who we are
Dawn AI ApS is the data controller. We provide the product Dawn. The website is https://atdawn.ai (and https://staging.atdawn.ai for preview). We were previously known as Sustainly ApS. We are based in Copenhagen, Denmark.
We have not appointed a data protection officer. For privacy questions, email frederik@atdawn.ai.
What we collect
Depending on how you use Dawn, we may collect:
- Account data via Clerk: name, email, and user id.
- Demo booking via Cal.com: name, email, company, and timeslot.
- Newsletter email, if you subscribe.
- Usage data about how the site and product are used.
- A cookie consent record (your analytics and marketing choices).
- Support and debug data via Sentry.
- Payment details processed by Stripe. We do not store card numbers.
Google Ads, Analytics, and enhanced conversions
We use Google Ads (AW-17909450707) to measure whether ads led to a booked meeting.
We use Google Analytics 4 (or the Google tag destinations linked to that Ads tag) for site analytics only after Analytics consent.
Consent Mode v2: storage and ads signals stay denied until the matching toggle is accepted.
Enhanced conversions / user-provided data: if Marketing is accepted and you book a meeting (or submit a form with contact details), we may send a hashed email (and hashed name, phone, or address if present) to Google so a conversion can be matched to an ad click. We do not use this to build a public profile of you. See Google’s policy: https://business.safety.google/privacy/
Google signals: if we enable it, Google may use data from signed-in Google users who allowed ads personalization, together with our consented analytics and ads data, for cross-device measurement, demographics, and ads features. This only runs when Marketing (ads personalization) is granted. See https://support.google.com/analytics/answer/9445345
Personal data may be transferred to Google in the United States. We rely on Google’s contractual terms and the Data Privacy Framework where applicable.
Other processors
We use these providers to run the service. Several are in the United States. Where a processor is certified under the EU–US Data Privacy Framework we rely on that; otherwise we rely on Standard Contractual Clauses and the processor’s contractual terms.
- Clerk (authentication): https://clerk.com/legal/privacy
- Cal.com (scheduling): https://cal.com/privacy
- Stripe (payments): https://stripe.com/privacy
- Sentry (error monitoring): https://sentry.io/privacy/
- Vercel (hosting): https://vercel.com/legal/privacy-policy
Legal bases (GDPR)
GDPR requires us to name the legal basis for each use of personal data:
You can withdraw cookie consent with Cookie settings in the footer, and newsletter or other consent by emailing frederik@atdawn.ai.
| Purpose | Typical data | Legal basis |
|---|---|---|
| Account and product | Name, email, user id | Contract (Art. 6(1)(b)) |
| Demo booking | Name, email, company, timeslot | Steps prior to a contract (Art. 6(1)(b)) |
| Newsletter | Consent (Art. 6(1)(a)) | |
| Analytics cookies | Usage data | Consent (Art. 6(1)(a)) |
| Marketing cookies and hashed Google matching | Email and similar identifiers | Consent (Art. 6(1)(a)) |
| Necessary cookies, security, fraud prevention | Technical and security data | Legitimate interests (Art. 6(1)(f)) |
| Payments | Billing data via Stripe (we do not store card numbers) | Contract (Art. 6(1)(b)) |
| Error monitoring | Support and debug data | Legitimate interests (Art. 6(1)(f)) |
Retention
The consent cookie is kept for 12 months (the same as its Max-Age).
Booking and account data are kept for as long as the customer relationship lasts, and then as required for legal bookkeeping in Denmark.
Google Analytics and Ads data are kept per Google’s settings and our Analytics retention setting, currently 2 or 14 months as configured in GA4.
Newsletter addresses are kept until you unsubscribe.
Your rights
Under GDPR you can ask us to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase data (“right to be forgotten”), where the law allows.
- Restrict processing.
- Receive your data in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time. Cookie consent: Cookie settings in the footer. Newsletter or other consent: email frederik@atdawn.ai.
- Lodge a complaint with Datatilsynet, the Danish supervisory authority: https://www.datatilsynet.dk
How to use your rights
Email frederik@atdawn.ai. We will respond without undue delay and within one month. We may need to verify your identity before we act. Providing account data is required to use the product; you can close your account if you do not want to provide it.
Automated decisions
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
If you allow Marketing, Google may use consented data for ads measurement and personalization as described above. That is Google’s advertising measurement, not a decision we take about access to Dawn.
Security
We use technical and organizational measures appropriate to the risk, including encryption in transit, access control, and hosting on Vercel. No method of transmission or storage is completely secure.
Children
Dawn is not intended for anyone under 18. We do not knowingly collect personal data from children under 18. If you believe we have, contact frederik@atdawn.ai and we will delete it.
Changes
We may update this policy. The effective date at the top will change when we do. The current version is always on this page.
Contact
Privacy contact: frederik@atdawn.ai
