1. Overview
HandyDesk provides software and AI-assisted tools for independent service businesses. This policy applies to handydesk.app, app.handydesk.app, help.handydesk.app, Leo, Business Line, and related HandyDesk services. Operators control the customer and business information they place in HandyDesk. We process that information to provide the service, follow operator instructions, secure the platform, support users, and meet legal obligations.
2. Information we collect
- Account and business data: name, email, phone, business name, settings, service area, team members, preferences, authentication information, and account status.
- Operator-provided customer data: lead and client contact information, addresses, messages, notes, jobs, visits, estimates, invoices, payments, photos, attachments, and related records.
- Connected-service data: information an operator authorizes HandyDesk to access from services such as Google, Gmail, Google Calendar, payment providers, communications providers, and lead platforms.
- Usage and technical data: device and browser information, IP address, logs, feature activity, diagnostics, security events, and support communications.
- Public-site submissions: information visitors submit through contact, support, signup, or other public forms.
- Billing and service information: records needed to manage Operator and Teams & Enterprise subscriptions, one-time Leo usage boosts, Business Line, custom domain connection, and payment-related services. Sensitive card details are handled by payment processors rather than stored directly by HandyDesk where processor-hosted checkout is used.
3. Google, Gmail, and Google Calendar
Connecting a Google account is optional. HandyDesk requests only the permissions shown during Google's authorization flow and uses Google information only for the user-facing features an operator chooses.
What may be accessed
- Google identity: name, email address, profile image, and account identifiers used for connection or authentication.
- Gmail: message metadata, participants, timestamps, labels, bodies, threads, and attachments needed to display and organize business communication, connect customer context, draft replies, and send operator-directed messages, depending on the permissions granted.
- Google Calendar: calendar settings, events, attendees, locations, descriptions, availability, and related identifiers used to show availability and synchronize visits or appointments. If write access is granted, HandyDesk may create, update, or delete events when the operator directs the related action.
How Google data is used
Google data is used only to provide or improve visible HandyDesk features such as account connection, email and calendar display, lead and client organization, schedule synchronization, drafting, and operator-requested actions. When Leo processes Google information, it does so to provide a HandyDesk feature requested by or presented to the operator.
HandyDesk does not use Gmail or Calendar data to train generalized AI models, build advertising profiles, serve ads, determine creditworthiness, or market to an operator's customers.
Storage, sharing, and disconnecting
HandyDesk may store protected OAuth credentials, connection identifiers, sync state, and Google-derived records needed to provide connected features. Google-derived records saved into a client, lead, job, visit, calendar, or communication record become part of the operator's HandyDesk business record and are protected using the same tenant-isolation and access-control principles as other HandyDesk data.
We do not sell Google user data or disclose it to data brokers. Minimum necessary information may be processed by contracted infrastructure, security, communications, and AI providers only to provide or secure user-facing HandyDesk features, under appropriate confidentiality and data-protection obligations.
Disconnecting Google stops future access and synchronization. It does not automatically delete business records already imported, copied, sent, created, or saved in HandyDesk. Account deletion includes deletion or invalidation of stored Google connection credentials and Google-derived data associated only with the account, subject to legal, fraud-prevention, security, payment, dispute, and backup-integrity obligations.
HandyDesk's use and transfer of information received from Google APIs is intended to comply with the Google API Services User Data Policy, including its Limited Use requirements.
4. Other connected services and lead platforms
Connected services may provide lead, contact, project, communication, calendar, phone, payment, or other business data after an operator authorizes the connection. HandyDesk uses that information to manage the operator's workflow and complete actions the operator directs or approves. Disconnecting a provider stops future access but does not automatically remove business records already saved in HandyDesk.
5. How we use information
- Provide, operate, maintain, personalize, and improve HandyDesk and Leo.
- Connect leads, clients, jobs, visits, messages, schedules, estimates, invoices, payments, and public pages.
- Authenticate users, manage accounts, Leo usage, Business Line, payment-related services, and support.
- Process operator-directed AI, communication, scheduling, and workflow actions.
- Detect fraud, abuse, security threats, technical failures, and policy violations.
- Comply with law, enforce agreements, and protect operators, customers, HandyDesk, and the public.
- Respond to people who request signup, support, or other information. Public-form submissions are not automatically added to unrelated marketing without an appropriate choice or permission.
6. How information is shared
Information is shared only as needed to operate HandyDesk, follow an operator's instructions, complete a transaction, provide a connected feature, protect the service, or comply with law. Categories of processors may include cloud hosting and storage, authentication, communications, payment processing, analytics and diagnostics, support, security, and AI-processing providers.
Operators may choose to send or share information with their own clients, team members, vendors, payment providers, or connected services. Those operator-directed actions may also be governed by the recipient's own privacy terms.
7. Retention and deletion
Account and business records are retained while an account is active and afterward only as reasonably necessary to provide requested exports or recovery, complete deletion, satisfy tax, accounting, payment, dispute, security, fraud-prevention, and legal obligations, and maintain limited backups. Retention depends on record type and legal need.
Verified deletion requests remove approved active data from normal production use. Residual encrypted copies may remain in backups until those backups cycle out. Some transaction, consent, audit, security, or dispute records may be retained where legally required or reasonably necessary.
8. Your choices and rights
Depending on applicable law, you may ask to access, correct, export, or delete personal information, or object to or restrict certain processing. You may disconnect integrations, change permissions, or close your account. HandyDesk may need to verify identity and authority before acting on a request.
Operators remain responsible for responding to their own customers' requests concerning data the operator controls. HandyDesk will reasonably assist operators where appropriate.
9. Cookies and public-site tracking
HandyDesk may use necessary browser storage, cookies, request logs, and similar technologies to deliver pages, maintain sessions, protect forms, prevent abuse, and diagnose failures. The public HandyDesk website does not use personal information for cross-context behavioral advertising. If non-essential advertising or tracking is introduced, this notice will be updated and choices will be provided where required.
10. Security
HandyDesk uses administrative, technical, and organizational safeguards designed for the sensitivity of the data, including tenant isolation, access controls, encryption in transit, protected credential storage, logging, backups, and security monitoring. No system can guarantee absolute security. Operators are responsible for protecting credentials, devices, team access, and connected accounts.
11. Contact and policy changes
For privacy, Google-data, access, deletion, or support questions, email info@handydesk.app. Existing operators may also use Help & Feedback inside HandyDesk so the account can be verified.
HandyDesk may update this policy as the service changes. Material changes will be posted here and, when appropriate, presented inside the service before materially new uses of connected data begin.