Privacy Policy

Effective Date: July 15, 2026

At Undesk ("we", "our", or "us"), we are committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by Undesk when you use our website, application, and associated services (collectively, the "Service").

Information We Collect

We collect information to provide better services to our users. The types of information we collect include:

Account Information: When you create an account, we collect your name, email address, and authentication credentials. If you sign up using Google, we collect your profile information as permitted by your Google privacy settings.
Workspace and Client Data: As a CRM and invoicing platform, you may input data about your business, team members, and your clients. This includes contact details, project notes, contracts, and uploaded files. This data is strictly yours, and we only process it to provide the Service to you.
Billing Information: When you subscribe to a paid plan, your payment information (e.g., credit card details) is collected and processed securely by our third-party payment processor, Razorpay. We do not store your full credit card numbers on our servers.
Usage Data: We automatically collect information about how you interact with our Service, such as IP addresses, browser types, and pages visited, to improve performance and security.

How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain our Service securely.
To process transactions and send related information, including invoices and subscription alerts.
To send administrative messages, technical notices, and security alerts.
To respond to your comments, questions, and provide customer support.
To improve and personalize your experience with Undesk.

Data Storage and Security

We prioritize the security of your data above all else. Your structured data is stored securely in our enterprise-grade databases (hosted via Supabase) and files are stored securely (via Cloudflare R2). We implement strict Row-Level Security (RLS) protocols to ensure that your workspace data is completely isolated and cannot be accessed by unauthorized users, external entities, or other companies.

Third-Party Services

We may share your data with trusted third-party vendors who assist us in operating our Service. These include:

Supabase: For secure database hosting and user authentication.
Razorpay: For processing subscription payments securely and compliantly.
Cloudflare: For edge routing, security, and document storage (R2).
Resend: For delivering transactional emails (like invoice receipts).

We strictly do not sell, rent, or trade your personal information to third parties for marketing purposes.

Your Data Rights

Depending on your location (e.g., GDPR, CCPA), you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request full deletion of your account and associated data.
Export your data in a machine-readable format.

To exercise any of these rights, please contact us at undeskdev@gmail.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact our Data Protection Officer at:
undeskdev@gmail.com