Terms, privacy and data processing

Last updated 2 October 2026

Done Calm is provided by Damn Square LLC, a limited liability company registered in Wyoming, United States ("we", "us"). Questions: support@donecalm.com. Privacy questions: privacy@donecalm.com.

Terms of service

1. Who these terms apply to

These terms apply to every organisation and person that uses Done Calm at donecalm.com (the "Service"). If you accept them for a company, you confirm that you may bind that company, and "you" means the company. The Service is intended for business use.

2. Accounts

You log in with a one-time code sent to your work email. Keep access to that mailbox secure, and make sure everyone you invite is allowed to see the information in your workspace. You are responsible for activity in your workspace.

3. Plans, fees and billing

• The Free plan has the limits shown on the pricing page. Paid plans (Plus, Pro) are billed per person, monthly or yearly, in US dollars or, in Europe, in euros, at the prices shown when you order.
• Corporate setup is a one-time service fee, separate from the subscription: Setup Standard 750 or Setup Plus 1,500 (USD or EUR), or a price agreed in writing for larger teams. It starts with a non-refundable discovery call fee of 99 (USD or EUR), which is credited in full toward the setup fee when you go ahead. After setup, the subscription is billed per person at the Pro price.
• Payments are processed by our payment partner, who may act as the seller of record and add the applicable sales tax or VAT.
• Upgrades apply straight away. Downgrades take effect at the end of the current billing period. Monthly plans can be cancelled at the end of any month. Fees already paid are not refunded, unless the law requires it.
• We may change prices for future billing periods with at least 30 days' notice by email.

4. Acceptable use

Don't use the Service to break the law, to send spam, to store malware, to try to get into other workspaces, or to overload or reverse-engineer the Service. We may suspend a workspace that puts the Service or other customers at risk, and we will tell you why.

5. Your data

You own the data you put into your workspace. You give us permission to host, process and back it up only to provide and support the Service. You can export your data to Excel at any time. When you close your account, we delete workspace data within 30 days, except where the law requires us to keep it.

6. Availability and changes

We work to keep Done Calm available and secure, but we don't promise it will be uninterrupted or error-free. We may improve or change features. If we remove a major feature you pay for, we will tell you in advance.

7. Liability

The Service is provided "as is". To the extent the law allows, we are not liable for indirect or consequential losses, lost profits or lost data, and our total liability is limited to the fees you paid in the 12 months before the claim. Nothing in these terms limits liability that cannot be limited by law.

8. Ending the agreement

You can stop using the Service at any time. We may end the agreement with 30 days' notice, or straight away if you seriously break these terms.

9. Law

These terms are governed by the laws of the State of Wyoming, United States. If you are based in the European Union, you also keep any protection that the law of your country gives you and that cannot be excluded by contract.

Privacy policy

What we collect

• Account details: name, work email, company name and role.
• Workspace content: the tasks, projects, customers, purchases and files that you and your team add.
• Requests from our website: the details you send with Start free, plan or Corporate setup requests, including your answers to our questions.
• Technical data: IP address, browser and request logs needed to run, secure and debug the Service, and your country to show prices in the right currency.

Why we use it

To provide the Service and log you in (contract), to keep it secure and prevent abuse (legitimate interest), to answer your requests and prepare consultations (steps before a contract), and to meet legal and tax duties (legal obligation). We don't sell personal data and we don't use your workspace content for advertising.

Who processes it for us

• Cloudflare, Inc.: hosting, storage and security.
• Resend: sending login codes, invitations and service emails.
• Paddle: payments and invoicing, once paid plans are active.

Some of these providers are in the United States. Transfers from the EU are covered by Standard Contractual Clauses or the EU-US Data Privacy Framework, depending on the provider.

How long we keep it

Workspace content: while your account is active, and up to 30 days after you close it. Website requests: up to 24 months. Invoices and billing records: as long as tax law requires. Logs: a short period, usually days.

Your rights

You can ask to see, correct, export or delete your personal data, to object to or limit how we use it, and to withdraw consent where we rely on it. Email privacy@donecalm.com. If you are in the EU, you can also complain to your local data protection authority.

Data processing terms

These terms form part of the agreement between your company (the controller) and Damn Square LLC (the processor) for personal data in your workspace, in line with Article 28 of the EU General Data Protection Regulation.

• Instructions: we process workspace data only to provide the Service and on your documented instructions, which are these terms and your use of the Service.
• Confidentiality: anyone who can access workspace data at Damn Square LLC is bound to confidentiality.
• Security: we use encryption in transit, login by one-time codes with attempt limits, signed sessions, per-project access rights and isolated storage, and we review these measures over time.
• Sub-processors: the providers listed in the privacy policy. We will tell you about new sub-processors in advance, and you may object.
• Help with requests: we help you answer data subject requests, and with security and impact assessments where reasonable.
• Breaches: we tell you without undue delay, and within 72 hours, after becoming aware of a personal data breach that affects your workspace.
• End of service: you can export your data at any time. We delete it within 30 days after your account closes, unless the law requires otherwise.
• Audits: we give you the information needed to show we meet these terms. Write to privacy@donecalm.com.
• Transfers: where workspace data leaves the EU, the transfer is covered by Standard Contractual Clauses or an equivalent safeguard.

Cookies

Done Calm uses only cookies and storage that are needed for the Service to work. We don't use advertising or tracking cookies.

• dc_session: keeps you logged in for up to 30 days. Strictly necessary.
• Cloudflare security cookies: may be set by our hosting provider to protect the site from attacks and bots. Strictly necessary.
• Theme preference: stored in your browser so the app remembers light or dark mode.

Because these are strictly necessary, we don't ask for cookie consent. If we ever add optional cookies, we will ask first.