Privacy policy
Draft. The text in [PLACEHOLDER] brackets is filled in and reviewed by counsel before paid launch (F1).
Who we are
[PLACEHOLDER: legal entity name, registered address, contact email for privacy requests]
[PLACEHOLDER: Grievance Officer (India, DPDP) and EU/UK representative, if appointed]
What we collect
Account: your email address and a hashed password, held by Amazon Cognito.
Connectors: the cloud account id you link, connection status and a masked token. The desk token itself is kept in AWS Secrets Manager.
Desks: serial number, claim time, firmware version and daily online history (kept for [PLACEHOLDER: retention, today 90 days]).
Consent: which version of these terms and this policy you accepted, and when.
[PLACEHOLDER: anything else counsel adds, e.g. support emails]
What we do not collect
Your cloud provider keys stay in your own account; the desk never holds them.
The website sets no advertising or analytics cookies and loads no third-party fonts or scripts.
Why we use it
[PLACEHOLDER: purposes and legal bases, e.g. contract (running the service), legitimate interest (security logs)]
Who processes it
[PLACEHOLDER: sub-processors: Amazon Web Services (hosting, region), email delivery; transfer safeguards]
How long we keep it
Install and offboard tickets expire after an hour and are deleted automatically after that.
[PLACEHOLDER: retention for each category, including logs and backups]
Your rights
Export: Account → Export my data in the console downloads everything we hold about you as JSON.
Delete: Account → Delete account erases your account, connectors, desk links and tickets. Each desk is sent a wipe and released; stored secrets are destroyed after a [PLACEHOLDER: recovery window, today 7 days].
[PLACEHOLDER: other rights (correction, objection, complaint to a supervisory authority) and how to exercise them]
Changes
[PLACEHOLDER: how users are told about a new version]