Privacy Policy

1. Scope

This policy applies to YundaDesk websites, applications, APIs, and customer-service channel integrations. A business using YundaDesk controls the customer conversations and contact data it submits to the service; YundaDesk processes that data to provide the service.

2. Information we process

• Workspace account, member, billing, security, and support information.
• Customer messages, channel identifiers, delivery receipts, attachments, and conversation metadata that a workspace connects to YundaDesk.
• OAuth authorization metadata and encrypted or access-controlled credentials required to operate connected channels and commerce applications.
• Technical logs, device and browser data, IP-derived security signals, and service usage records.

3. Commerce platform data

When a workspace installs the YundaDesk application for Shopify, Shoplazza, or SHOPLINE, YundaDesk processes the store identifier and the read-only store, customer, order, fulfillment, product, cart, and abandoned-checkout facts supported by that platform. Approved customer identity fields are limited to email and display name where they are needed to identify a support conversation or order.

The first commerce release does not store customer phone numbers, shipping or billing addresses, identity-document data, or complete raw provider payload dumps. Commerce event payloads and AI tool inputs or outputs exclude those fields. Provider access tokens are kept in YundaDesk secret storage rather than ordinary business records.

4. Meta Platform Data

When a workspace connects Messenger, Instagram, or WhatsApp, YundaDesk uses Meta Platform Data only to establish the requested channel connection, receive and send authorized communications, show conversation context, maintain delivery state, secure the integration, and provide support. YundaDesk does not sell Meta Platform Data.

5. Purposes and legal bases

We process information to perform our service agreement, follow workspace instructions, secure and troubleshoot the service, meet legal obligations, and pursue legitimate interests such as preventing abuse and improving reliability. Where consent is required, the relevant workspace or individual may withdraw it.

6. Sharing and international processing

We disclose information only to authorized workspace members, channel and infrastructure providers needed to deliver the service, professional advisers, or authorities when legally required. Providers are subject to contractual and security controls. Data may be processed outside the individual’s country with safeguards required by applicable law.

7. Retention and security

We retain information only for the service, contractual, security, backup, and legal periods that apply to it. Channel and commerce credentials are kept separately from ordinary business records and are removed when the related authorization is deleted. We use access controls, encryption in transit, tenant isolation, audit trails, and operational monitoring; no system can guarantee absolute security.

8. Choices and rights

Depending on applicable law, individuals may request access, correction, deletion, restriction, portability, or objection. End customers should normally contact the business that used YundaDesk to communicate with them. Workspace administrators can disconnect a channel or commerce application and submit deletion requests. See our Data Deletion Instructions.

9. Contact

Privacy questions and rights requests may be sent to support@yundadesk.com. Include the relevant workspace and channel or commerce platform, but do not email passwords or access tokens.