Privacy Policy

Draft for owner review — not final legal copy.

This is a reasonable starting draft, not a substitute for review by a qualified lawyer in your jurisdiction (including GDPR/UK-GDPR/CCPA applicability to your specific business). It must be reviewed and approved by the product owner before launch (see docs/launch-checklist.md).

Effective date: Draft — not yet in effect

1. Who controls what

You (the creator using CustomDesk) are the data controller for the fan aliases, handles, notes, and order details you enter — you decide what to record and why. CustomDesk acts as your data processor: we store and process that data only to provide the service to you, never for our own purposes, and never sell it.

2. What we collect

  • Account identity (email, authentication data) — handled by Clerk, our identity provider.
  • Fan, request, payment, and rate-card records you enter — fan aliases, handles, notes, order titles, prices, payment amounts, due/delivery dates, and reuse-rights flags.
  • Billing data for Pro subscribers — handled by Stripe; we store only the resulting subscription status, never your card details.
  • Anonymous product usage analytics (page views, feature usage, performance metrics) via PostHog, EU-hosted. Session replay masks all input values and every fan-identifying element on screen.

3. What we never collect

CustomDesk never connects to, logs into, or scrapes any platform account on your behalf. We never store explicit media — the product is metadata-only by design. We never see or touch payments between you and your fans; Stripe only ever bills your own CustomDesk subscription.

4. How we use it

Solely to run the product: rendering your dashboard and lists, computing your monthly totals, generating your CSV exports, enforcing plan limits, and improving the product via aggregated, anonymous analytics. We do not use your data to train AI models, and we do not share fan-identifying content with any third party.

5. Your rights

Export all your data at any time (Account → Export all my data — two CSVs, all-time, free on every plan). Delete your account and every associated record permanently at any time (Account → Delete account). Downgrading from Pro never deletes anything — your existing fans, requests, and payment history stay exactly as they are.

6. Sub-processors

  • Clerk — authentication, session management, and transactional account-related email (password reset, etc).
  • Stripe — Pro subscription billing.
  • PostHog (EU) — anonymous product analytics, EU-hosted.
  • Convex and Vercel — application database and hosting.

7. Data retention

We retain your data for as long as your account exists. Deleting your account permanently removes all fan, request, payment, and rate-card records, and — where technically feasible — your underlying identity record with our auth provider.

8. Contact

Privacy questions or data requests: support@customdesk.app.