Privacy Policy

This Privacy Policy explains how Undesk, operated by Arham Chhajed (an independent, founder-led venture based in Bhusawal, Maharashtra, India — not currently a registered legal entity), collects, uses, and protects information when you use undesk.in and the Undesk platform. By using Undesk, you agree to the practices described in this policy. If you do not agree, do not use Undesk.

Information you provide directly

• Account information: name, email address, and any business/organization details you provide when signing up.
• Business and workspace data: information you enter to use Undesk, including client records, project data, contracts, invoices, expenses, proposals, notes, and any files you upload.
• Your clients' information: if you use Undesk to manage your own clients, you may enter their names, contact details, and other information into the platform. You are responsible for having the appropriate basis (e.g. your own relationship with them) to enter their data into Undesk — see Section 9.
• Payment information: Undesk's subscription billing is processed by Razorpay. Undesk does not collect or store your full payment card details; these are handled directly by Razorpay.

Information collected automatically

• Usage data: general information about how you interact with Undesk (e.g. features used, pages visited), collected to operate and improve the service.
• Cookies: Undesk uses at least one functional cookie to maintain your session and remember which workspace you're viewing. Undesk does not use third-party analytics or tracking tools (e.g. Google Analytics, Meta Pixel) — usage data is collected through Undesk's own in-house analytics only.

We use the information described above to:

• Provide and operate the Undesk platform and its features
• Process your subscription payments (via Razorpay)
• Send you service-related communications (e.g. invoice notifications, account updates) via Resend
• Send you marketing communications (product updates, offers, and other promotional content) via Resend and, at times, manually from official Undesk email addresses. You may opt out of marketing communications at any time via the unsubscribe link included in these emails, or by contacting hello@undesk.in. Opting out of marketing emails does not affect service-related communications necessary to operate your account.
• Respond to support requests sent to hello@undesk.in
• Maintain the security and integrity of the platform

Undesk includes an AI Assistant feature that uses workspace data (such as your projects, clients, and invoices) to answer your questions and help manage tasks. To power this feature, Undesk sends relevant data to a third-party large language model (LLM) provider for processing.

We do not use your data, or your clients' data, to train AI models — neither our own nor any third party's.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We share information with the following service providers ("subprocessors") strictly to operate Undesk:

Each of these providers processes data only as necessary to provide their respective service to Undesk, under their own applicable privacy and security practices.

We may also disclose information if required by law, legal process, or to protect the rights, property, or safety of Undesk, our users, or others.

We take reasonable measures to protect the information stored in Undesk, including:

• Workspace data access controls intended to keep each account's data separate from other accounts' data
• File storage through authenticated, access-controlled infrastructure (Cloudflare R2)
• Payment processing handled entirely by Razorpay, a PCI-compliant provider, rather than by Undesk directly

No system is completely secure, and we do not guarantee that unauthorized access, disclosure, or loss of data will never occur. We are continuously working to identify and address security issues as part of operating the platform.

We retain your information for as long as your account is active. If you delete your account, your data will be permanently deleted from our systems within 30 days.

You may also request an export of your data by contacting hello@undesk.in.

Depending on applicable law, you may have rights to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data (see Section 7)
• Request an export of your data

To exercise any of these rights, contact us at hello@undesk.in.

If you enter your clients' information into Undesk (names, contact details, invoices, contracts, etc.), you are responsible for ensuring you have the appropriate right or basis to do so under applicable law, and for your own relationship and communications with your clients regarding their data. Undesk acts as a data processor/tool in this context — you control what data is entered and how it's used in your workspace.

Undesk's database and authentication are hosted via Supabase, and file/document storage is hosted via Cloudflare R2.

Undesk is not directed at, and should not be used by, individuals under the age of 18, consistent with Undesk's Terms and Conditions. We do not knowingly collect personal information from anyone under 18.

We may update this Privacy Policy from time to time. During Undesk's current early/MVP stage, changes will be reflected by updating the "Last updated" date at the top of this page. We do not currently commit to active notification (e.g. email) of changes to this policy.

Questions about this Privacy Policy, or requests regarding your data, can be sent to: