Privacy Policy

Superdesk is a customer relationship management tool for wedding and event professionals, currently in early access. This policy explains what data we collect, how we use it, and how you can control it.

Data we collect

• From you, when you sign up: your name, email, organization name, and any business details you add (address, logo, branding). If you sign in with Google or Microsoft, we receive your name and email from that provider.
• Content you add: every event, contact, document, note, file, and template you create while using Superdesk. This content belongs to you.
• From your clients and invitees: when someone books a meeting, fills out a form, or opens a page you share, we collect the details they submit (name, email, phone, and their responses) so we can deliver it to you.
• Connected accounts: if you connect Gmail, Outlook, or a calendar, we access only the email and calendar data you authorize, to power those features.
• Technical data: IP address, browser, device type, and pages viewed — used to keep the service running and spot abuse.
• Payment data: if you subscribe to a paid plan, Stripe handles your card details. We never see or store your card number — only the subscription status.

How we use it

To run the service, bill you correctly, email you about your account, and fix things that break. We also look at aggregate usage to decide what to build next.

We don’t sell your data. We don’t share it with ad networks. We don’t use it to train AI models outside of the actions you explicitly take in Superdesk (like asking AI to do something on your behalf).

Service providers we rely on

• Supabase — database and authentication, hosted in the US.
• Stripe — payment processing. If you collect payments from your own clients through Superdesk, Stripe Connect processes those too.
• Resend — transactional email.
• Vercel — application hosting.
• PostHog — product analytics.
• Sentry — error monitoring.
• Upstash — rate limiting and abuse prevention.
• Anthropic / OpenAI — the AI models behind AI. Your prompts are sent to them when you use AI; they do not retain your data for training.
• Google (Gmail, Calendar, and Places) — Gmail and Calendar only if you connect those integrations; Places powers address and venue search. We only access the data you grant. Google sign-in shares your name and email.
• Microsoft (Outlook mail, Calendar, and sign-in) — only if you connect Outlook or sign in with Microsoft. We only access the data you grant.
• Mapbox — maps for venue locations.

Each provider has its own privacy policy. We chose them because their privacy posture fit ours.

Your rights

• Access and export: email us and we’ll send you everything we have about you.
• Deletion: email us and we’ll delete your account and associated data within 30 days. Some records (like invoices) may be retained longer to meet accounting obligations.
• Correction: most account data you can edit yourself in-app.

Reach us at hello@superdesk.app.

Cookies

Authentication cookies only. We don’t use advertising cookies. PostHog uses session cookies for product analytics — you can opt out from in-app settings.

Changes to this policy

If we change this policy in any material way, we’ll email you at least 14 days before the change takes effect.

Contact

Questions? Email hello@superdesk.app.