Last Updated: August 16, 2026. We believe in absolute data transparency. Here is exactly how Desk Simplified and DS Workspace collect, process, and protect your information.
Desk Simplified (“we,” “us,” or “our”) operates DS Workspace — our B2B operations platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have over it.
By using our services, you agree to the practices described in this policy. If you are using Desk Simplified on behalf of a company, you represent that you have the authority to bind that organization to this policy.
Account & Identity Data: When you register, we collect your name, work email address, company name, and billing information required to activate your subscription.
Workspace & HR Data (DS Workspace): This includes projects, tasks, documents, employee records, leave requests, attendance logs, expense data, digital signatures, and form submissions created by your team within the platform.
Usage & Telemetry Data: We collect anonymized data on how features are used — page views, session duration, and feature interaction — to improve the product experience. This data is never tied to individual users for advertising purposes.
Device & Technical Data: IP address, browser type, operating system, and device identifiers collected for security monitoring and fraud prevention.
We use your data exclusively to provide, maintain, and improve our services. This includes authenticating users, processing payments, sending transactional emails (invoices, security alerts, onboarding), and powering the platform features you subscribe to.
We never sell your workspace data, employee records, or lead lists to third parties. We do not use your proprietary business data to train AI models or for cross-customer benchmarking.
Your data is retained for as long as your account is active. Upon account termination or a verified deletion request, we will delete or anonymize your data within 30 days, except where we are legally required to retain certain records (e.g., billing history for tax compliance, typically 7 years). Backup copies are purged within 90 days.
To deliver our services, we use a limited set of carefully vetted sub-processors:
Cloudflare — CDN, edge security, DDoS protection, and bot mitigation for all web traffic.
Neon — Managed serverless PostgreSQL for all primary database storage. Hosted in Singapore.
AWS — Object storage (S3) for file uploads, documents, and form attachments. Hosted in Singapore.
Stripe — Payment processing for international customers. Desk Simplified never stores raw card data; all payment information is tokenized by Stripe.
Razorpay — Payment processing for Indian customers. Card and UPI data is handled directly by Razorpay and never stored on our servers.
All sub-processors are contractually bound to process data only per our instructions and to maintain appropriate security standards.
Desk Simplified uses Google APIs to provide core features such as calendar scheduling and document syncing. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We strictly use this data to provide and improve user-facing features. We do not sell this data, use it for serving advertisements, or transfer it to third parties or data brokers.
Depending on your jurisdiction, you have the following rights over your personal data:
GDPR (Europe): Right to access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and objection to processing.
CCPA (California): Right to know what personal information is collected, right to delete, right to opt-out of sale (we do not sell data), and right to non-discrimination.
IT Act 2000 & DPDP Act (India): Right to access, correction, and erasure of personal data. We comply with India’s Digital Personal Data Protection Act.
To exercise any of these rights, contact us here. We will respond within 30 days.