Compliance
What we do to protect your data and your customers' data, and what we don't claim yet.
SOC 2
Not certifiedWe don't have a SOC 2 report. Our security controls are designed with SOC 2 requirements in mind, and our Security page lists what is in place today, limits included.
GDPR
What we doA visitor's data can be exported or permanently deleted on request. Conversation data is deleted automatically after a retention window, 365 days unless you ask us for a different one. Every company that processes data for us is named in our Privacy Policy.
CCPA
What we doWe don't sell personal information. If you live in California, you can ask us at privacy@deskclone.ai for a copy of your data or for it to be deleted.
India DPDP Act
What we doWe're based in India. Personal data is used only to run the service, encrypted, stored on AWS in the US, and deleted on request.
Data Processing
Encryption and location
Data is encrypted in transit and at rest, in the database, file storage and backups, and stored on AWS in the US.
Sub-processors
Every company that processes customer data for us is listed in section 4 of our Privacy Policy, and we update that list before a new one receives your data.
Questions?
Questions about how we handle data go to privacy@deskclone.ai.