Your data, handled with care.

Information you provide

When you contact us, book a discovery call, or become a client, you provide information directly. This may include your name, business name, email address, phone number, role, calendar availability, and details about your business operations that you share with us in order to receive services.

Information collected automatically

When you visit our website, we automatically collect limited technical information — including approximate location (derived from IP, not stored), browser type, pages viewed, referring source, and timestamps. Our analytics provider is Vercel Web Analytics, which is cookieless and does not collect personally identifying data. Separately, if you reach us from one of our advertisements, we record the advertising click identifier and campaign parameters for that visit — described in full under Cookies & tracking below.

Information from third parties

If you connect a calendar to DeskFlow for scheduling (for example, Google Calendar or Apple Calendar), we receive limited event metadata strictly for the purpose of detecting conflicts and reserving time slots. We do not read, store, or share the content of your calendar events.

• Schedule, confirm, reschedule, and remind you about discovery calls.
• Provide, operate, and improve our back-office services.
• Communicate with you about your engagement, billing, and updates.
• Respond to questions, requests, and support needs.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell your personal information. We share information only with:

• Service providers we use to operate the business (for example, our hosting provider, payment processor, email delivery, and error monitoring). These providers are contractually bound to handle your information only as needed to deliver services to us.
• Google Ads, when you book a call, send us a message, or start a subscription after arriving from one of our advertisements. We send an irreversibly hashed (SHA‑256) form of your email address, and for a booked call your phone number, so Google can match the conversion to the ad click. Your email address and phone number are never sent in readable form, and the hash cannot be reversed back into them.
• Legal and safety reasons if required by law, subpoena, or to protect the rights, safety, and property of DeskFlow, our clients, or others.
• Business transfers if DeskFlow is involved in a merger, acquisition, or sale of assets, in which case your information may be transferred subject to this policy.

Our website uses a small number of strictly necessary cookies — for example, to remember authentication state for the client portal.

Advertising and campaign measurement. We advertise DeskFlow on Google. Across our website — including the checkout confirmation page — we load Google’s tag (gtag.js) for Google Ads conversion tracking and remarketing. This sets advertising cookies and lets Google recognise your browser across sites in its network. We use it to measure which campaigns lead to enquiries and sign-ups. We do not sell or broker your information, and we do not use it to build profiles of you for other advertisers.

Enhanced conversions. When you complete a booking, contact form, or subscription, we also send Google an irreversibly hashed (SHA‑256) form of your email address — and, for a booked call, your phone number — so it can match that conversion to the advertisement you clicked. The hashing happens in your browser before anything is sent: the readable values never leave the page, and a hash cannot be turned back into an email address or phone number. Google uses these values only to attribute the conversion.

Our own attribution cookie. If you arrive from an advertisement or a campaign link, we set a first-party cookie named df_attr that lasts 90 days. It stores the advertising click identifier and campaign parameters from that visit, plus the page you landed on, so we can tell which campaign produced a booking or a subscription. It is HttpOnly and Secure, cannot be read by page scripts, and the cookie itself holds no name, email, or account information.

Analytics. Vercel Web Analytics measures page views and on-site actions such as which calls-to-action are used. It is cookieless and does not collect personally identifying data.

You can block advertising cookies through your browser settings or an ad blocker. The site works normally without them.

We retain information for as long as needed to provide our services and to comply with our legal obligations. Booking records are retained for up to twelve months after the last interaction. Client engagement records are retained for the duration of the engagement plus seven years to meet tax and accounting requirements.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have specific rights under the CCPA/CPRA, and residents of the EEA, UK, and Switzerland have rights under GDPR. To exercise any of these rights, contact us at hello@deskflowhq.com.

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit, encrypted storage for sensitive fields, role-based access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

DeskFlow does not provide services to or knowingly collect information from children under 16. If you believe a child has provided information to us, please contact us so we can delete it.

DeskFlow operates from the United States. If you access our services from outside the U.S., your information will be transferred to and processed in the U.S. By using our services, you consent to this transfer.

We may update this Privacy Policy from time to time. Material changes will be noted by updating the effective date above. We encourage you to review this page periodically.

Questions about this policy or your information? Email hello@deskflowhq.com.