Privacy Policy

InayaDesk ("InayaDesk", "we", "us") provides remote access, remote support, IT management and related software and services (the "Services"). This policy explains how we handle personal data when you visit inayadesk.com, create an account or use the Services. For questions, contact privacy@inayadesk.com.

• Account data: name, email address, company, job role, password hash and authentication settings.
• Billing data: billing contact and address, plan and invoices. Card details are processed by our payment provider and never stored by us.
• Device and connection data: device names, operating system, device IDs, IP addresses, session start and end times, and connection quality metrics.
• Support data: messages, tickets and attachments you send us.
• Website data: pages visited, referring site and approximate location, collected with privacy-friendly analytics.
• Employee monitoring data (only where a customer enables it): activity, application usage and attendance data about the customer's own users, processed on the customer's behalf.

Remote session content (screen, keyboard and mouse input, clipboard and transferred files) is encrypted end to end between the connected devices. We do not view, store or analyse session content, except for session recordings that a customer explicitly enables, which are stored encrypted in the customer's account and can be deleted by the customer at any time.

• To provide, maintain and secure the Services, including routing sessions through our relay network.
• To authenticate users, prevent fraud and abuse, and investigate security incidents.
• To provide customer support and send service and security notices.
• To bill for paid plans.
• To improve the Services using aggregated, de-identified usage data.
• To send product updates and marketing, where you have agreed or where the law allows. You can unsubscribe at any time.

Where data protection laws such as the GDPR apply, we process personal data to perform our contract with you, for our legitimate interests in running and securing the Services, to comply with legal obligations, and with your consent where required (for example, certain marketing).

When a business uses InayaDesk to manage its devices and users, that business is the controller of the personal data processed in its account and InayaDesk acts as its processor. Our data processing agreement governs that processing. If you are an end user of a business customer, please contact that business about your data.

We do not sell personal data. We share it only with service providers who help us run the Services (such as hosting, email delivery, payment processing and customer support tools) under contracts that protect your data; when required by law; to protect the rights and safety of our users and the public; or in connection with a merger or acquisition, subject to this policy.

We may process data in countries other than your own. Where required, we protect transfers using appropriate safeguards such as standard contractual clauses. Enterprise customers can choose the region where their account data is stored.

We keep account data while your account is active and for a limited period afterwards to meet legal, tax and security obligations. Session logs are kept according to your plan's retention settings. You can delete your account at any time from account.inayadesk.com.

We protect personal data with encryption in transit and at rest, access controls, monitoring and regular security testing. See our security overview for details.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email privacy@inayadesk.com. You also have the right to complain to your local data protection authority.

We use strictly necessary cookies to keep you signed in and secure. Where we use analytics or marketing cookies, we ask for consent where the law requires it, and you can change your choice at any time.

The Services are not directed to children under 16, and we do not knowingly collect their personal data.

We may update this policy from time to time. We'll post the new version here and, for material changes, notify account owners by email before the change takes effect.