The front page says nothing leaves your business until you have read it. This page is the detail behind that sentence. It names the files that stay on your machine, and what a job sends out to be worked on. It names who receives that, and where we stand on health information.
THE SHORT VERSION: ON THE INSTALLED PLAN YOUR FILES STAY ON YOUR MACHINE. WHAT A JOB READS TO PRODUCE AN ANSWER IS SENT, THROUGH OUR OWN GATEWAY, TO THE MODEL PROVIDERS WE NAME. WE ARE NOT A HIPAA BUSINESS ASSOCIATE TODAY AND WE WILL NOT CLAIM TO BE ONE.
On the installed plan the office runs on a computer at your business, and your files stay on that machine in the formats you already own. The agent reads them there. Your paperwork, your spreadsheets, your exports and the register of how the business runs are not copied up to us.
A job still has to think, and that thinking happens on a language model rather than on your computer. So the content a job reads to produce its answer is sent out, through our own gateway, to the model providers named on the privacy page.
The documents, the spreadsheets and the exports the agent works from. On the installed plan they sit on the computer at your business, and we read them there rather than holding a copy.
To answer a question, the model has to see the part it is working on. That is a page of a document, a row from a sheet, or the text of an email. It travels over an encrypted connection, under our account, and comes back as a draft you read before anything goes out under your name.
We do not sell or rent your information, and we do not train a model on it. Another business's work never sits beside yours, and nothing about your business goes on this website without your written permission.
The sheet you sign at setup says exactly what leaves the machine and what the agent reports back. Ask for it before you sign anything and we will send it to you.
$499 a month hosted anywhere in the United States, or $699 a month installed at your business.
On the hosted plan the office runs on our own servers, so the files a job has to read are held there instead. They sit in a space of their own, with nothing of yours sitting beside another business's work, and they are backed up daily.
We are not a HIPAA business associate today, and we do not sign a business associate agreement. That is the honest position, and it decides what you should hand us.
If your records carry patient or client health information, say so on the first call. We will either keep that material out of scope and work on the admin around it. Or we will tell you plainly that we are not the right fit for what you need yet.
The clinic and salon lane carries the same answer in its own words: clinics, salons, retail and professional services.
Four things would have to be true before we took health information on. We are writing them down so the answer is not a shrug on a call.
A signed business associate agreement, in writing, before any health information reaches the office.
A model path we can put under that agreement, because the thinking happens on providers we do not own.
The machine, the portal and the backups named in the same terms, so the whole route is covered and not only the parts we control.
A written record of who touched what, kept long enough to answer an audit.
Until all four exist we will not call this service compliant with HIPAA, and we would rather lose the work than blur that.
Requests to a model go out under our account, through a gateway we run. Nothing on your machine holds a model key, and no job reaches a provider without passing through it.
The gateway counts what each job costs, which is how the monthly ceiling works. Model usage is included up to $100 USD a month hosted or $300 USD a month installed. Each is a hard stop, and the office stops thinking at it. We lift a ceiling for that month only after you agree to pay the extra.
It is also where your rules are enforced. A job that would step outside them stops there and waits for you.
We have not been audited for SOC 2, ISO 27001 or HITRUST, and there is no report to send you. If a form asks for one, we will answer it in writing, including the answers that are no.
We sell to businesses in the United States, and this site is not aimed at consumers or at anyone under 18. There are no advertising pixels here, and the analytics our host runs are cookieless.
Which providers carry your work, what the machine reports back, what we hold and where it sits: ask and we will answer in writing. If we cannot meet your requirement, you will hear that instead of a maybe.
Ask and we will show you what we hold and where it sits. We answer these requests within 30 days, and usually the same week.
If something happens that puts your information at risk, we tell you in writing. You get what happened, what it touched, what we have already done, and what we would do differently.
Say so in the box on the contact page, and we will show you on the first call, before a penny changes hands.
Questions about this page go to dayvusupport at gmail dot com, and the answer comes from one of the two people who run the office.
This page is effective from 16 September 2026. If we change it, we will say so here and change the date at the top.
Say so in the box and we will show you where your data would sit, on the first call, before a penny changes hands.
AGENT ANSWERS SUPPORT EMAIL AROUND THE CLOCK · THE $699 CARD INCLUDES DAYVU'S PERSONAL EMAIL + PHONE · HUMAN CALLBACK WITHIN 24 HOURS, NOT INSTANT · YOUR SUMMARY BACK WITHIN TWO BUSINESS DAYS