Privacy Policy

Last updated: September 3, 2026

Deal On Desk ("we", "us") is a CRM and deal-management platform at dealondesk.co and app.dealondesk.co. This policy explains what we collect, why, and what we never do with it.

What we collect

• Account information. Your name, email address and business details when you create an account. Sign-in is passwordless: we email you a one-time link and never store a password.
• Customer data you store. Contacts, leads, deals, documents, notes, tasks and messages your business puts into Deal On Desk. This data belongs to your business. We process it only to run the service for you and never sell it, rent it, or use it for advertising.
• Website analytics for your own sites. If your business installs our tracker on its website, we record page views, and clicks and scroll depth aggregated into a coarse grid. We do not record coordinates, mouse trails, keystrokes or form contents, and visitors are anonymous sessions unless they submit one of your forms.
• Payment and billing details. Plan and billing information for your subscription. Card processing, when offered, is handled by a payment processor; full card numbers never touch our servers.
• Usage and log data. Standard server logs (IP address, browser, pages requested) kept for security and debugging.

Google user data

If you connect your Google Calendar, we request the calendar.events scope to create, update and delete the calendar events for appointments and calls you schedule in Deal On Desk, and your email address to identify the connected account. We do not read your other calendar events for any other purpose, and we do not access Gmail through this connection.

Deal On Desk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used for advertising, never sold, and never transferred except to provide the feature you asked for, for security, or to comply with law. You can disconnect Google Calendar at any time from Settings, or revoke access at myaccount.google.com/permissions; disconnecting deletes the stored tokens.

Google user data and artificial intelligence. Google user data is never used with, transferred to, or processed by any artificial-intelligence or machine-learning model — ours or anyone else's — and is never used to develop, train, or improve any such model. Deal On Desk's AI-assisted features (for example, drafting listing descriptions and email templates) operate only on data you create inside Deal On Desk, and are powered by Anthropic's Claude API under commercial terms that prohibit training on our data; the calendar integration itself only writes the events you schedule in Deal On Desk to your calendar, and no calendar data flows into any AI feature. We do not operate self-hosted or offline AI models.

Other connected services

If you connect a WordPress site, a Shopify store, a mailbox, or a texting number, we store the credentials needed for that connection encrypted, use them only to provide the feature, and delete them when you disconnect. Text messages are only sent to people whose recorded consent your business holds, and every recipient can opt out by replying STOP.

Cookies

The app uses cookies only to keep you signed in and to remember which account you are working in. The marketing site sets no advertising or cross-site tracking cookies.

Who can see your data

• People in your own business, according to the roles and permissions your owner sets.
• Service providers we use to run the platform — hosting, database, file storage and email delivery — bound to process data only on our instructions.
• Nobody else, unless the law requires it or you ask us to.

Retention and deletion

Your data stays as long as your account is active. Signed documents and their audit trails are retained as legal records. If you close your account, ask us at the address below and we will delete your business's data, except records we are legally required to keep.

Security

Data is encrypted in transit, access tokens are encrypted at rest, every account's data is isolated at the database level, and privileged actions are recorded in an audit log.

Children

Deal On Desk is a business tool and is not directed at children under 16.

Changes and contact

If this policy changes materially, we will note it here and tell account owners by email. Questions and requests: brandon@tiltmediaco.com.