Privacy Policy
Plain-language version: we collect what we need to run Deske, we don’t sell it, and we delete it when you tell us to. The longer version sits below.
Deske is a service businesses use to answer their phone and run their front desk. The following describes the data we collect, how we use it, and what we do (and don't do) with it.
What we collect
Four categories, in order of how often they come up.
- Account data — from the practice owner. Name, work email, business name, practice location, payment method.
- Service data — from the agent in operation. Call audio, transcripts, SMS contents, appointment metadata, caller phone number.
- Usage data — from the app. IP address, device type, pages viewed in the admin portal, error logs.
- Patient data — from callers and the booking page. Name, contact info, reason for visit, insurance details you choose to capture at intake.
How we use it
To provide Deske features: answering calls, booking appointments, sending SMS confirmations, and surfacing call activity in your admin portal. To diagnose issues, run aggregate analytics, and improve Aria's behavior.
- We do not sell your data.
- We do not train third-party models on tenant-scoped data.
- We do not display tenant-scoped data to other tenants. Per-tenant isolation is a hard line.
Who we share it with
Subprocessors for hosting, voice provisioning, SMS, email, payments, and observability. Each is bound by a data-processing agreement and scoped to the narrowest data it needs to function.
We share data with law enforcement only when legally compelled, and we notify the affected tenant unless legally prohibited.
Your rights
If you're a practice using Deske, you can export or delete your tenant data from the billing portal at any time. If you're a patient who interacted with a Deske-powered line, contact the practice — they control the data they collected. We'll honor any practice-initiated deletion request promptly.
California residents
CCPA / CPRA rights apply. You can request to know, delete, or correct personal information; opt out of sharing for cross-context behavioral advertising (we don't do this); and limit use of sensitive personal information.
EU / UK residents
GDPR rights apply. Email compliance@deske.ai with requests.
How to reach us
Email compliance@deske.ai with questions or requests. We aim to respond inside two business days.