Your data, clearly explained.

This notice explains how Desk AI for WhatsApp handles information when you use the managed Chrome extension and its website. The developer contact shown on the Chrome Web Store listing is responsible for this service. For privacy requests, contact kudamusasiwa@gmail.com.

Information the service uses

• Workspace identity: your verified email address, business name, workspace membership, device name, and device public key. Email verification connects your approved browsers to your workspace. A WhatsApp phone number is not required for sign-in or billing.
• Business information: knowledge and instructions that the workspace owner adds for approved devices to share.
• Browser storage: the extension stores settings, approved knowledge, client notes and follow-ups in your browser profile. It keeps the current chat context and drafts temporarily in browser session storage while WhatsApp Web is open.
• Account and usage records: device access, trial and credit balances, requested feature type, AI model, token or audio-duration usage, calculated cost, and billing-event references. Authentication tokens and email codes are stored as hashes; verification codes expire and have limited attempts.
• Payment records: Stripe customer, checkout, subscription and payment references. Stripe collects and processes payment details on its hosted checkout. The Desk service does not store card numbers.
• Security information: Cloudflare receives the IP address used to connect to the service. The service hashes it into hourly rate-limit records to reduce automated abuse.

Chat content, pictures and call audio

Before the managed extension reads chat content, it shows an in-product notice and asks you to agree. When you request a reply, picture interpretation, voice dictation, transcription or call summary, the extension sends the relevant chat context, business information, selected image or recorded audio through the managed service to OpenAI to process your request. The service does not save chat messages, prompts, pictures, call audio, transcripts or generated replies in its account database. OpenAI processes the content under its API terms and policies.

Voice dictation starts only when you choose its microphone control. Call recording starts only when you select the call recording control. It captures audio from the WhatsApp tab and your microphone, for up to 10 minutes; it does not save call video. Tell participants before recording and follow the consent rules that apply where you are.

Where information is processed

Cloudflare hosts the website, service and workspace records, and delivers transactional sign-in codes to your email address. OpenAI processes AI requests. Stripe processes payments and subscription events. These providers may process information in countries outside yours under their applicable terms and safeguards. Review their privacy information before using the service.

Why information is used

Information is used to verify your email, connect your workspace, authenticate approved devices, share business knowledge, provide AI features, measure usage and credits, prevent abuse, process payments, respond to support requests and keep the service secure. Information is not sold or used for advertising.

Limited use and access

Desk uses information from WhatsApp Web only to provide and improve the features described in the extension listing. It transfers information only to Cloudflare, OpenAI and Stripe when needed to operate those features, usage controls or billing, or when required for security or law. Desk does not sell user data, use it for personalised advertising, or provide it to data brokers. Desk staff do not read chats, prompts, pictures, call audio, transcripts or generated replies during routine service operation. Specific content may be accessed only with your consent for a support request, when required by law, or when necessary to investigate security or abuse.

Storage and choices

Workspace identity, approved devices, business knowledge, credit and usage records, and billing references are kept while needed to operate the workspace, support account or payment records, and meet security or legal obligations. Workspace owners can remove knowledge and revoke approved devices. To ask about access, correction or deletion of workspace data, use the contact above. Some records may need to be retained where the law requires it.

The extension does not send messages automatically by default. Review and edit suggested replies and summaries before sharing them. The workspace owner controls teammate invitations and shared knowledge.

Your rights and questions

Depending on your location, you may have rights to access, correct, delete, restrict or receive a copy of your personal information, or to object to certain processing. Contact the developer to make a request. You may also contact your local data-protection authority.