Privacy Policy

Desk is an AI assistant that reads and helps with your email, calendar and work. It is run by Eduardo Silveira Di Maro, in Italy, who is the data controller for what you put in it. Desk is invite-only. This page says what it keeps, why, who else sees it, and how to get it back or gone.

What Desk keeps

• Your account: your name, email address and profile picture from the sign-in you choose, through Clerk.
• What you do in Desk: your chats, the files you upload, artifacts, projects, memory, briefs, loops, schedules and settings.
• Google data, if you connect Google: the email and calendar content Desk reads to answer you (see below).
• Usage records: how many tokens each request used and what it cost, so daily and monthly limits work, plus an audit log of account and admin actions.
• Technical logs: errors and request logs from hosting, kept for a short time to keep Desk running.

Desk doesn't use advertising, tracking pixels or analytics cookies.

Gmail and Google Calendar

If you connect your Google account, Desk asks for permission to read, send and organise your Gmail, and to read your calendars and create or change events. It uses that access only to do what you ask in Desk: answering questions about your mail and schedule, drafting replies, and sending email or creating events after you approve each one. Desk never sends mail or changes your calendar without that approval.

Google data is sent to the AI model only as part of a request you made, and isn't used to train any model. People don't read it, except with your permission, for security, or where the law requires it. Desk doesn't sell it, share it for advertising, or transfer it to anyone except as needed to provide Desk.

Desk's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time in Desk's Settings, or at myaccount.google.com/permissions.

Who else processes it

Desk relies on these services, each only for its part:

• Anthropic: the Claude models that write Desk's replies.
• Vercel: hosting, scheduled jobs and the sandbox Desk's browser runs in.
• Neon: the database that stores your data.
• Upstash: rate limits.
• Clerk: sign-in and accounts.
• Google: Gmail and Calendar, if you connect them.

Some of these are in the United States. Transfers rely on their standard contractual clauses or equivalent safeguards.

Why (legal bases)

Desk processes your data to provide the service you signed up for (contract), to keep it secure and within its limits (legitimate interest), and where the law requires it.

How long

Your data stays until you delete it or your account. Deleting a chat removes it. Deleting your account removes your data from Desk's database straight away. Backups and logs held by the services above expire on their own schedules, usually within 30 days.

Your rights

You can see, correct, export and delete your data. Settings has "Export my data" (a zip of everything) and "Delete account". For anything else, or to object to or restrict processing, ask the owner who invited you to Desk. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali) or the one where you live.

Security

Traffic is encrypted, each person's data is separated in the database by row-level security, and access to production is limited to the operator.

Children

Desk isn't meant for anyone under 16.

Changes

If this policy changes in a way that matters, Desk will say so before the change applies.