Privacy Policy

This Privacy Policy explains how The Desk CRM collects, uses, and protects user data for businesses in Canada and internationally.

Rocket Launching Llama Technologies ("we," "our," or "us") operates the website https://getthedesk.app (the "Site") and associated applications and services (collectively, the "Services").

This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or interact with our Services.

1. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, or other contact details you provide through forms, subscriptions, or account registration.
• Customer and CRM data: Contacts, leads, communications, documents, appointments, and related business records you store in The Desk.
• Google Workspace data: When you connect Google, we may access Gmail, Google Calendar, Google Contacts, and Google Drive content you authorize, as described in Section 3.
• Usage Data: Information about how you use our website, including IP address, browser type, device information, pages visited, and the date/time of your visits.
• Cookies and Tracking Technologies: We use cookies and similar technologies to improve your experience, analyze usage, and personalize content.

2. How We Use Your Information

We use the information we collect for purposes such as:

• Providing and improving our Services
• Responding to your inquiries or requests
• Syncing and displaying authorized Google Workspace content inside The Desk (email, calendar, contacts, and selected Drive files)
• Providing optional AI-assisted features (for example summaries, drafts, classification, document text extraction, and search) solely to power user-facing product features
• Sending updates, newsletters, or marketing communications (you can opt out at any time)
• Analyzing usage and trends to improve site performance
• Complying with legal obligations

3. Google Workspace and Google User Data

If you connect Google to The Desk, we request only the OAuth scopes needed for the features you enable. Depending on which integrations you connect, this may include:

• Gmail: Read messages to sync email into your organization's inbox and CRM workflows; send email when you use The Desk to send or reply.
• Google Calendar: Read calendar metadata and create, update, or delete events that sync with appointments in The Desk.
• Google Contacts: Read contacts so you can import or search your Google address book (read-only; we do not write back to Google Contacts).
• Google Drive: Access only files or folders you explicitly select (via Google Picker / drive.file scope), for example notes or documents you choose to sync into The Desk.

We store encrypted OAuth tokens to maintain your connection. We retain Google-derived content only as needed to provide the Services you enabled (for example synced messages, calendar events linked to appointments, imported contacts, or selected Drive files). You can disconnect Google integrations at any time from Settings; disconnecting stops further access and you may request deletion of retained data as described in Section 8.

Google Limited Use compliance. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. We do not sell Google user data. We do not use Google Workspace or Photos API user data—including raw, aggregated, or derived data—to create, train, or improve foundational or generalized machine learning or artificial intelligence models.

4. Artificial Intelligence and Machine Learning

The Desk uses AI/ML processors to power optional, user-facing features such as inbox assistance, message classification, document insights, OCR/text extraction, and semantic search. Where those features operate on content that originated from Google Workspace APIs, processing is limited to providing or improving those in-product features for your organization. We do not transfer Workspace user data to third parties for the purpose of training foundational or generalized AI/ML models.

Current AI-related processors include:

• OpenAI (API, pay-as-you-go): Used for chat completions and embeddings that power in-app AI features. Per OpenAI's API data policies, API inputs and outputs are not used to train OpenAI models by default. In our OpenAI organization, data-sharing settings that would share feedback, evaluation/fine-tuning data, or inputs/outputs for model improvement are disabled.
• LlamaCloud (LlamaParse / LlamaExtract): Used for document OCR and text extraction so The Desk can process uploaded or synced documents for in-app features. Per LlamaExtract privacy documentation, processed data is used only to return extraction results and is not used for model training.
• Ollama (self-hosted / offline): We operate Ollama models on our own isolated infrastructure for local document insights and as a fallback when cloud AI is unavailable. In this mode, content is processed locally on our servers and is not transmitted to a third-party model provider for training or secondary purposes.

5. Sharing Your Information

We do not sell or rent your personal data.

We may share limited data only:

• With service providers that help us operate the Services (e.g., hosting, email delivery, communications providers, and the AI processors listed in Section 4), under contractual or policy terms appropriate to the service
• To comply with laws or regulations
• During a business transfer, such as a merger or acquisition

6. Cookies and Tracking

Our website uses cookies to:

• Remember your preferences and improve usability
• Analyze website traffic through tools like Google Analytics
• Support integrations with third-party platforms (such as LinkedIn, Meta, or Google)

You can adjust your browser settings to disable cookies, though some parts of the site may not function properly without them.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy or as required by law. Organization-scoped CRM and integration data is retained while your account remains active and for a reasonable period afterward unless you request earlier deletion where applicable.

8. Your Rights

Depending on your location, you may have rights to:

• Access or correct your personal information
• Request deletion of your data
• Withdraw consent to marketing or data processing
• Disconnect Google or other integrations and revoke OAuth access from your Google Account settings

To exercise these rights, please contact us at [email protected].

9. Data Security

We use reasonable technical and organizational safeguards to protect your data from unauthorized access, alteration, disclosure, or destruction.

10. Third-Party Links

Our website may contain links to other sites, such as LinkedIn or partner platforms. We are not responsible for the privacy practices or content of those third-party websites.

11. Children's Privacy

Our Services are not directed toward children under 16, and we do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with the revised effective date.

13. Contact Us

Last updated: July 27, 2026