Privacy Policy

This Privacy Policy explains how DeskRelay handles personal data on deskrelay.app. The short version: the only personal data we actively collect is what you choose to send us via the contact form or by email, plus aggregated visit statistics from Google Analytics. We do not sell personal data. DeskRelay is operated by Knowledge Studio LLC (a Texas limited liability company), which acts as the data controller for the purposes of this policy.

What we collect

When you submit the contact form or email us

If you book a call via the contact form, or email us directly at [email protected], we collect your name, email address, business name (if provided), and the content of your message. The form submission is forwarded to our inbox by Web3Forms (a form-to-email forwarding service) so we can read and reply.

We use this information solely to respond to your inquiry, schedule a call if you've asked for one, and keep a record of the conversation. We keep it for as long as is reasonably necessary to do those things, including ongoing business records, then delete it. You can ask us to delete your data sooner by emailing [email protected].

Website analytics

We use Google Analytics 4 to understand how visitors find and use this site (page views, referring sites, browser and device type, country-level location, navigation flow). Google Analytics sets cookies and may collect a hashed/truncated IP address. We use this data only in aggregate, to improve the site. We do not use it for advertising, retargeting, or any cross-site tracking. Our legal basis for this processing is legitimate interests (improving the site).

Google's own data practices for Analytics are described at policies.google.com/privacy. You can opt out of Google Analytics across all sites by installing the Google Analytics Opt-out Browser Add-on.

When you visit the website

Our website is hosted on Cloudflare Pages. Like any web host, Cloudflare automatically records standard server-side request data (such as IP address, the page requested, and timestamp) for security, fraud prevention, and operational purposes.

What we don't do

• We do not sell or share your personal data with anyone for advertising or marketing.
• We do not use tracking pixels, fingerprinting, or third-party advertising scripts beyond Google Analytics.
• We do not use any personal data we receive for profiling or automated decision-making.
• We do not add you to any marketing list without your explicit opt-in.

Service providers

We use a small number of trusted third-party service providers to run the website and respond to inquiries:

• Cloudflare Pages — website hosting and DNS.
• Web3Forms — forwards contact form submissions to our inbox.
• Google Analytics — aggregated visit statistics.
• Google Workspace — email inbox where we receive and reply to your messages.

All providers are vetted and operate under standard data processing terms.

Your rights

If you are located in the UK, EU, or a US state with applicable privacy laws, you have the right to request access to personal data we hold about you, correction of inaccurate data, deletion of data, restriction of or objection to certain processing, and portability of data you have provided.

To exercise any right, email [email protected]. We may need to verify your identity before acting on a request, and will assess and respond in line with applicable law, generally within 30 days. Some rights are not absolute (for example, we may need to retain data to comply with legal obligations or protect our rights).

Legal basis for processing (UK / EU visitors)

If you are located in the UK or EU, we rely on the following legal bases under UK GDPR / EU GDPR:

• Legitimate interest for operating the website, running the live widget demo, responding to inquiries, and protecting our systems from abuse.
• Contract where processing is necessary to take steps at your request before entering into or performing a contract with you.
• Legal obligation where we are required by law to process data (for example, responding to valid legal requests).
• Consent for any processing that would otherwise require it. You can withdraw consent at any time.

Your right to complain

If you are in the UK or EU and believe we have not handled your personal data correctly, you have the right to lodge a complaint with a data protection supervisory authority. In the UK this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, it is the supervisory authority in your Member State.

California Privacy Notice

If you are a California resident, this section applies to you in addition to the rest of this Privacy Policy.

• Categories of personal information and purposes. As described in the sections above.
• Sale of personal information. We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
• Third-party collection. Our service providers may process technical data in the course of providing their services to us, but do not collect personal information from our visitors for their own purposes.
• Do Not Track. Our site does not respond to "Do Not Track" browser signals. We do not track users across third-party sites.
• Your rights. California residents have rights to know, delete, and correct personal information, and to opt out of sale or sharing. To exercise these rights, email [email protected].

Data retention

Enquiry and correspondence data (contact form submissions and direct email) is kept for as long as is reasonably necessary to respond, maintain business records, resolve any disputes, and meet legal obligations. We do not have any other categories of personal data to retain.

International data transfers

DeskRelay is operated from the United States (Knowledge Studio LLC, Texas), and some service providers may process data outside the UK and EU. For UK and EU visitors, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers where required by applicable law.

Security

We use industry-standard technical and organizational measures to protect data, including TLS encryption, access controls, and minimization of data collection as a core defensive principle. No system is perfectly secure, but we take reasonable steps to reduce risk.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last Updated" date at the top of this page. Please check back occasionally.

Contact

For any questions about this Privacy Policy or how we handle your data, email [email protected].