Privacy Policy
Funnel Library by DTC Daily · funnels.dtcdailynews.com
Last updated: 4 November 2026
1. Who we are and how to reach us
The Funnel Library at funnels.dtcdailynews.com is operated by NexaSky FZCO, 21-C Silver Tower, Cluster I, JLT, Dubai, United Arab Emirates ("DTC Daily", "we", "us"). This policy explains what personal information we collect when you use the Funnel Library, how we use it and the choices you have. For privacy questions or requests, email marketing@dtcdaily.news.
2. Information we collect
Information you give us - Account details: your email address, and any other email addresses you link to your account. - What you save and ask for: your boards and saved ads and pages, the brands you follow, and the brands you ask us to add (the name or website you type in). - Messages: anything you send us by email, such as support or takedown requests.
Payment information - Payments are processed by Stripe. We do not see or store your full card number. We store your Stripe customer ID and the status of your subscription or purchase (plan, start and end dates, whether it was refunded).
Information collected automatically - Sign-in records: when you request a sign-in code we record the time and your IP address. Codes and links are stored only in hashed form. For each signed-in session we store a hashed session token, the browser's user-agent string, and when the session started and was last used. - Usage: the pages you view on the Funnel Library, the time, the website you came from (its domain), any campaign tags in the link (such as utm_source), whether you are on a phone or desktop, your access level, and clicks on locked features. These records are tied to a random visitor ID, and to your account if you are signed in. We do not store IP addresses in these records. - First visit source: where you first arrived from (for example a newsletter issue, a social post or a search engine), the first page you landed on and the date. This is kept in a cookie and copied to your account when you sign up or buy. - AI assistant (MCP) use: if you connect an AI assistant, we record each request it makes for you (the tool used, the search terms or items requested, the time, and whether it succeeded), the lookups counted against your plan, and the app you connected. API keys and access tokens are stored only in hashed form.
Information from DTC Daily's newsletter platform - If you are a DTC Daily newsletter subscriber, we look up your subscription on Beehiiv by email to check whether you have a paid newsletter plan that includes the library.
Ad data in the library - The library contains ads from public ad transparency libraries, such as the Meta Ad Library, and publicly available landing pages. These can include advertisers' page names and people who appear in ads. We do not collect information about people who comment on or interact with ads. To ask for removal, see our Copyright and Takedown Policy.
3. How we use information
We use information to: - provide and operate the Service, including signing you in, giving you the access your plan includes, and saving your boards, follows and brand requests; - process payments, renewals, cancellations and refunds; - send sign-in emails and messages about your account, plan and Library Pass; - keep the DTC Daily newsletter in step with your access (see section 6); - measure which pages and sources bring visitors, sign-ups and purchases, and improve the Service; - enforce plan limits and our Terms, prevent abuse, and protect the Service, including rate limits and automatic pauses on the MCP server; and - comply with the law.
4. Aggregated and de-identified data
We use aggregated counts (for example, visitors, sign-ups and sales by source and by day) to understand how the Service is used. These counts do not identify you.
5. How we share information
We do not sell your personal information. We share it only: - with the service providers listed in section 6, who process it for us to provide the Service; - with the AI assistant provider you choose to connect (such as Anthropic, OpenAI or Cursor), which receives the results of the requests you make and handles them under its own privacy policy; - where required by law, or to protect our rights, users or the Service; and - with a buyer or successor if the business is reorganised, merged or sold.
The brands you ask us to add become public in the library, but we never show who asked for them.
6. Service providers
| Provider | What it does for us | Data it handles |
|---|---|---|
| Stripe | Payments, invoices, the billing portal | Email, payment details, purchase and subscription records |
| Resend | Sends sign-in codes and links | Email address, the sign-in email |
| Beehiiv | Hosts the DTC Daily newsletter and our member records | Email address, newsletter subscription, and account fields we send it: access level, access end date, how access was gained, Stripe customer ID, first sign-in date, Library Pass end date |
| DigitalOcean | Hosts the Funnel Library servers, database and media storage | All data described in section 2 |
| Google Analytics | Website analytics, subject to the cookie choices in section 12 | Pages viewed, device and browser information, IP address (processed by Google), Google Analytics cookie IDs |
| Google Fonts | Delivers the fonts used on the site | Your IP address and browser information when fonts load |
Newsletter. When you create a Funnel Library account, your email address is added to the DTC Daily newsletter on Beehiiv and you may receive a welcome email. If you had already unsubscribed, we do not re-subscribe you. You can unsubscribe at any time using the link in any newsletter email; your Funnel Library account stays open.
7. International data transfers
Our servers are located in the United States, and our service providers may process data in the United States and other countries. Where we transfer personal data out of the EEA, the UK or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.
8. Data retention
We keep personal information as long as needed for the purposes in this policy. In particular:
| Data | How long |
|---|---|
| Account, boards, follows, brand requests, subscription records | While your account exists. Deleted when you ask us to delete your account, except records we must keep for tax, accounting or legal reasons |
| Sign-in code records (including IP address) | 7 days |
| Rate-limit records (may include IP address or email) | About 2 days |
| Session records | Until you sign out or the session expires (30 days) |
| Page-open records | 90 days |
| Visitor page-open counts (for the sign-up limit) | About 13 months |
| Payment event records received from Stripe | 180 days after processing |
| Usage and visit-source records, MCP request logs | 12 months |
9. Security
We use HTTPS for all connections. Sign-in codes, session tokens, API keys and access tokens are stored only as hashes, so they cannot be read back from our database. Our private analytics dashboard can only be opened by the owner's signed-in account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your privacy rights
Depending on where you live, you may have the right to: - access the personal information we hold about you; - correct it; - delete it; - restrict or object to how we use it; - receive a copy in a portable format; and - withdraw consent where we rely on it.
California residents have the right to know, delete and correct their personal information. We do not sell or share personal information for cross-context behavioural advertising.
To make a request, email marketing@dtcdaily.news from the email address on your account. You can also complain to your local data protection authority.
11. Marketing
You can unsubscribe from the DTC Daily newsletter and marketing emails at any time using the link in any email. We will still send emails you need to use the Service, such as sign-in codes and messages about your plan.
12. Cookies and similar technologies
| Name | Purpose | Lasts |
|---|---|---|
| Sign-in cookie | Keeps you signed in | 30 days |
| Pending sign-in cookie | Links a sign-in code to the browser that asked for it | 15 minutes |
| Visitor ID cookie | A random ID that counts visits and free page opens | 1 year |
fl_src |
Remembers where you first arrived from | 1 year |
Google Analytics cookies (e.g. _ga) |
Website analytics | Up to 2 years |
fl_consent (stored in your browser, not a cookie) |
Remembers your cookie choice | Until you clear it |
Your choice. Visitors in the EEA, the UK and Switzerland see a cookie notice, and Google Analytics cookies are off unless you choose "OK". Elsewhere, Google Analytics is on by default. Google Analytics is never used for advertising on this site. You can block or delete cookies in your browser settings; the Service may not work properly without the sign-in cookies.
13. Children
The Service is not directed to children. You must be at least 18 to use it.
14. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date and, for material changes, tell you by email or on the Service.
15. Contact
NexaSky FZCO 21-C Silver Tower, Cluster I, JLT, Dubai, United Arab Emirates Privacy: marketing@dtcdaily.news