Privacy Policy

TODO before launch: legal review. This skeleton names the real processors and regions of the StayDesk architecture (documents/plan/05–06).

1. Who we are

StayDesk (staydesk.ai) — operator details as listed in the site footer (Impressum).

2. What we process

Website visits (technical access data); demo assistant conversations (the messages you type); newsletter subscriptions (email, double opt-in); client accounts (name, email, tenant data); payments (handled by Stripe — we never store card numbers); guest conversations on client websites (processed on behalf of the client as the data controller).

3. Where data lives

Application and database are hosted in Sydney, Australia (OVHcloud, Supabase — no EU adequacy decision; transfers are safeguarded by Standard Contractual Clauses). Cloudflare (USA) provides CDN/proxy services. AI processing of conversations uses Google's Gemini API. When an EU-resident deployment launches, EU client data will be stored in Frankfurt (documents/plan/05).

4. Retention

Demo conversations and temporary demo data are purged automatically. Account and billing data are kept for the duration of the contract plus statutory retention periods.

5. Your rights

Access, rectification, erasure, restriction, portability, objection — contact hello@staydesk.ai. EU residents may lodge a complaint with a supervisory authority.