The short version

• We never see or record your screen. The picture, sound and your keystrokes travel encrypted between your browser and your PC. Our relay, when it's needed, passes along encrypted data it can't read.
• We keep only what's needed to run your account: your email, a scrambled (hashed) copy of your password, your PCs' names, and your plan.
• No ads, no tracking cookies, no analytics, and we don't sell your data.
• You can delete your account and its data yourself, any time.

Who we are

DextraDesk is run by [OWNER'S LEGAL NAME OR COMPANY], [POSTAL ADDRESS] ("we", "us"). We're responsible for the personal data described here. Contact: support@dextradesk.com.

What we collect and why

What	Details	Why
Account	Your email address; your password, stored only as an argon2id hash (we can't read it); whether your email is verified; when you signed up.	To give you an account, sign you in, and send account emails (verification, password reset).
Two-factor sign-in	If you turn it on: the secret your authenticator app shares with us, and hashed recovery codes.	To check your codes when you sign in.
Sign-ins	A sign-in cookie on app.dextradesk.com. We store only a hash of it, with when it was created and when it expires (30 days, renewed while you use the app).	To keep you signed in, and so signing out or changing your password ends sign-ins.
Your PCs	Each PC's name (its Windows computer name unless you rename it), operating system, DextraDesk app version, when it was added, and when it was last online.	To list your PCs, connect you to them, and know when an update has reached them.
Plan and billing	Your plan, your Stripe customer and subscription IDs, the subscription's status, monthly or yearly, and renewal date. Stripe handles your card details and billing address; we never see your card number.	To give you the plan you paid for, and to keep records that tax law requires.
Activity and safety	When your account was last active; whether it has been disabled, and why.	To run and support the Service and to stop misuse.
Technical logs	Our servers log errors, when PCs come online and go offline (with their IDs), and relay connections (with IP addresses and session IDs). IP addresses are also used, in memory only, to limit repeated sign-in and sign-up attempts. Our web servers don't keep a log of every page visited.	To keep the Service secure and working, and to fix problems.
Messages to us	Anything you send to support@dextradesk.com, including any screenshots or log files you attach.	To answer you.

What we don't collect

• Your screen, sound and input. They go directly between your browser and your PC, encrypted with WebRTC's DTLS-SRTP. When a network blocks direct connections, they pass through our relay server in encrypted form; the relay can't decrypt them, and nothing is recorded. Our servers only help your browser and PC find each other and agree how to connect.
• Files, clipboard or anything else on your PC. The DextraDesk app doesn't send us what's on your PC.
• Tracking. dextradesk.com sets no cookies at all and loads nothing from other companies. The app at app.dextradesk.com sets only the one sign-in cookie it needs to work.

On your PC

The DextraDesk app keeps its pairing key on your PC, encrypted by Windows so only your Windows user can use it, and writes log files to %LOCALAPPDATA%\DextraDesk\logs. These logs stay on your PC; we only see them if you send them to us. To check for updates, the app contacts app.dextradesk.com every few hours.

To connect directly, your browser and your PC exchange network addresses (IP addresses), as all WebRTC connections do. Each can see the other's address.

Legal bases (EU and UK)

If the GDPR or UK GDPR applies to you, we use your data: to perform our contract with you (account, PCs, connections, billing); for our legitimate interests in keeping the Service secure, preventing misuse and fixing problems (logs, rate limits, disabling accounts); and to meet legal obligations (tax and accounting records).

Who we share it with

We use these service providers, who handle data for us under contract and only to provide their service:

• DigitalOcean: hosts our servers and database in New York, USA, and our relay server in Toronto, Canada, including backups.
• Resend: sends our account emails (USA).
• Stripe: processes payments and runs the billing pages. [If Stripe Managed Payments is used: Stripe acts as the seller (merchant of record) and handles your payment data under its own privacy policy.]
• Cloudflare: runs our domain's DNS and forwards email sent to support@dextradesk.com to our inbox.
• [EMAIL INBOX PROVIDER]: hosts the inbox where we read support email.

We don't sell or rent your personal data, and we don't share it for advertising. We may disclose data if the law requires it, to protect people from harm or to investigate misuse of the Service, or as part of a sale or merger of the business (you'd be told first).

Where your data is

Our servers are in the United States and Canada. If you live elsewhere, your data is transferred there. [Transfer safeguards for EU/UK users, e.g. Standard Contractual Clauses, to be confirmed.]

How long we keep it

• Account, PCs and sign-ins: until you delete your account. Sign-ins expire after 30 days unused; email links after 24 hours (verification) or 1 hour (password reset).
• After you delete your account: it's removed from our live database immediately. Copies remain in database backups for up to 7 days, and in server backups for up to 28 days, then they're overwritten.
• Technical logs: up to 30 days.
• Billing records: as long as tax and accounting law requires (often up to [7] years), at Stripe and with us.
• Support emails: as long as needed to help you, then deleted.

How we protect it

All connections use HTTPS or encrypted WebRTC. Passwords are hashed with argon2id; sign-in cookies, email links and recovery codes are stored only as hashes. Two-factor sign-in is available. Only the owner can sign in to our servers, using keys, and the database accepts connections only from our app server. Repeated sign-in attempts are rate-limited. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.

Your choices and rights

• See and correct: your email, PCs and plan are shown in the app. Rename or remove PCs there.
• Delete: in the app under Settings, delete your account. It's removed straight away, as described above.
• Get a copy, or anything else: email support@dextradesk.com. We'll reply within 30 days, and may need to confirm the request comes from your account's email address.
• EU and UK: you also have the right to restrict or object to how we use your data, to data portability, and to complain to your data protection authority.
• California and other US states: you have the right to know, correct and delete your data. We don't sell or "share" personal information as those laws define it, and we don't use it for targeted advertising. We won't treat you differently for using your rights.

Children

DextraDesk isn't for children. You must be at least [18] to create an account. If you believe a child has given us personal data, contact us and we'll delete it.

Changes

If we change this policy in an important way, we'll email account holders before the change takes effect. The date at the top shows the latest version.

Contact

[OWNER'S LEGAL NAME OR COMPANY], [POSTAL ADDRESS]. Email: support@dextradesk.com.