Privacy Policy

Effective date:

This Privacy Policy explains how EasyDesk ("we", "our", "us") collects, uses, discloses and protects personal data when you use our customer messaging platform (the "Service"). This policy is intended to satisfy Facebook / Meta Platform policy verification requirements.

1. Data We Collect

Account Data: Name, email address, workspace / organization information.
Authentication & Access: OAuth tokens and page IDs granted through Facebook / Instagram permissions (never your password for those services).
Conversation Content: Messages, attachments, metadata exchanged between you and your end users.
Technical Data: Browser type, IP address (for security/logging), timestamps, diagnostic logs.

2. How We Use Data

Provide and operate the Service (message routing, inbox management, automation).
Authenticate your connection with Facebook / Instagram pages.
Maintain security: abuse detection, fraud prevention, rate limiting.
Improve reliability, performance analytics and product development (aggregated & anonymized where possible).
Respond to support requests and contact you about critical service notices.

3. Legal Basis

We process personal data based on legitimate interests in operating and securing the Service, performance of a contract with you, and compliance with applicable laws.

4. Data Sharing

Sub‑processors: Infrastructure, storage, email and analytics providers strictly to support the Service (each bound by data protection agreements).
Legal & Safety: If required by law or to protect rights, safety, and integrity of the Service.
We do not sell personal data.

5. Facebook / Instagram Permissions

Tokens obtained via the Meta platform are stored securely and used only to send/receive permitted messages and retrieve page/profile context needed to deliver the Service.

6. Data Retention & Deletion

Conversation data is retained while your account is active unless you delete it earlier.
Upon account closure you may request deletion; we will permanently erase or irreversibly anonymize data within 30 days unless legal retention obligations apply.
Backups are purged on a rolling schedule (typically within 35 days).

7. Security

Encryption in transit (TLS) and at rest where supported.
Role/permission based access controls.
Audit logging & anomaly monitoring.
Least-privilege infrastructure segmentation.

8. Your Rights

Subject to local law you may request: access, correction, deletion, restriction, portability, or objection to processing. Contact us to exercise these rights.

9. International Transfers

Where data crosses borders we rely on standard contractual clauses or equivalent safeguards.

10. Children

The Service is not directed to children under 16 and we do not knowingly collect their data.

11. Changes

We may update this policy. Material changes will be notified via the dashboard or email.

12. Contact

For privacy inquiries or data requests contact: [email protected]