Privacy Policy
Version: Draft 0.1 · Last updated
Draft pending legal review. This document is not yet in force. Highlighted items are still to be confirmed.
This policy describes how To be confirmed: seller legal entity name and registered address ("DeskAcross", "we") handles personal data across the website, customer accounts, and the desktop application. We are the controller of the data described here. To be confirmed: privacy contact address and, if required, data protection representative.
1. The desktop application
Clipboard content stays under your control. The application saves clipboard history, such as text, images, and files, in a data directory on your own computer. We do not receive it.
Sync runs between your own devices. When you turn on sync, items travel over your local network or through a folder you choose in your own Dropbox, iCloud Drive, or OneDrive account. Synced data is encrypted with the sync passphrase you set. With the shared folder method, the encrypted files are stored by your cloud provider under that provider's terms. We do not operate a sync server for clipboard content.
Keyboard and mouse sharing, which is in development and labelled Experimental, sends input between your confirmed computers over your local network.
Sensitive items. The application can skip or mask content it recognizes as keys, tokens, or passwords, and can keep such items out of sync. These checks run on your computer.
License activation. When you activate a paid plan, the application sends the activation code and To be confirmed: device identifiers sent at activation, for example an installation ID, device name, operating system, and app version to our license service so we can confirm the license and count activations.
Updates. If automatic update checks are on, the application contacts our update service, which receives technical request data such as IP address, app version, and operating system.
Diagnostics and product analytics. To be confirmed: whether the desktop application sends any telemetry or crash reports, and the opt-in mechanism. Logs are stored locally. If support asks for logs, you choose whether to send them. Support packages are designed to exclude clipboard content and keystrokes.
2. The website
- Server logs. Our hosting provider processes IP address, user agent, and requested pages to deliver and protect the site.
- Preferences. Your theme choice and your cookie consent choice are stored in your browser's local storage. They are not sent to us.
- Analytics. With your consent, we use Google Analytics 4 to measure visits, demo plays, download clicks, and checkout steps. Analytics is not loaded until you consent, and stops receiving new data if you withdraw consent. See the Cookie Policy.
- Contact form. We process your email address, the category, subject, and message you send, and a request reference. Cloudflare Turnstile checks that the submission comes from a person and processes technical data from your browser for that purpose. We apply rate limits based on IP address and email address.
3. Accounts, purchases, and support
When customer accounts are available we process:
- Account data: email address, username, sign-in method, and for Google sign-in the identifier Google provides.
- Organization data: organization name, members, roles, invitations, and seat assignments.
- Order data: plan, amount, currency, tax, billing details, and payment status. Card data is handled by To be confirmed: payment provider and is not stored by us. To be confirmed: whether the provider acts as merchant of record and independent controller.
- License and device data: license status, activations, and device names.
- Support data: your requests and our replies.
- Transactional email: delivery status of messages such as receipts and license delivery.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing accounts, licenses, and purchases | Performance of a contract |
| Answering contact and support requests | Performance of a contract or legitimate interest |
| Security, fraud and abuse prevention | Legitimate interest |
| Website analytics | Consent |
| Product news by email | Consent |
| Tax and accounting records | Legal obligation |
5. Recipients
We share data with service providers that process it on our behalf: To be confirmed: final list of processors, including hosting, database, payment, transactional email, support desk, and error monitoring providers, Google (analytics, and sign-in if you choose it), and Cloudflare (Turnstile). We do not sell personal data.
6. International transfers
Some providers process data outside your country. To be confirmed: transfer mechanisms, for example standard contractual clauses, and the countries involved.
7. Retention
- Contact and support requests: To be confirmed: retention period.
- Account data: while the account exists, then To be confirmed: retention period after closure.
- Order and invoice records: To be confirmed: statutory retention period for the seller's jurisdiction.
- Analytics data: To be confirmed: GA4 retention setting.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or export your data, to object to processing, and to withdraw consent at any time. Send a request through the contact page. We verify your identity before acting. You may also complain to your data protection authority. To be confirmed: target countries and any region-specific notices.
9. Children
The Services are not directed to children. To be confirmed: minimum age.
10. Changes
The version and date above identify the current text. We will notify account holders of material changes.