Privacy PolicyPrivacy Policy

ChatDesk is an AI chat assistant platform built and operated by Codeaex, based in Lahore, Pakistan ("we", "us"). This policy explains how we handle personal information on our website, in the ChatDesk dashboard, and in the chat assistants our customers add to their websites and channels.

When a business ("customer") uses ChatDesk to chat with its own customers ("end users"), that business decides what its assistant collects and why. For those conversations we act on the business's instructions, and the business's own privacy policy also applies.

Website visitors who request a demo:

• Name, business name, email, phone or WhatsApp number, industry, the plan you are interested in, and your message.

Customer accounts:

• Company name, contact details, login email and password (stored only as a secure hash).
• Plan, trial dates, usage counts and settings for each assistant.
• Documents, website pages and notes you add so your assistant can answer questions.

End users who chat with an assistant:

• The messages in the conversation and the page the chat started on.
• Contact details the person chooses to share, such as name, phone, email, what they need and a preferred time.
• If WhatsApp is connected: the phone number and messages exchanged with the business's WhatsApp number.

Technical information:

• IP addresses are used briefly, in memory, to limit repeated login, chat and form requests. We do not store them in our database.
• A login cookie and small items in browser storage, described in our Cookie Policy.

• To provide the service: generate assistant replies, save leads and show them in the dashboard.
• To manage accounts, plans, usage limits and billing.
• To send service emails such as password reset links and demo request notifications.
• To respond to demo requests and support questions.
• To keep the platform secure, prevent abuse and fix problems.

We do not sell personal information, and we do not use chats, leads or uploaded documents to advertise to anyone.

To write replies, the relevant parts of a conversation and the business's knowledge are sent to an AI model provider. Depending on availability we use Google (Gemini), Groq or Anthropic (Claude). Document text is also converted into search data (embeddings) using Google's models.

These providers process the data to return a result under their own terms for business customers. We do not ask them to use it to train their models.

We share information only with service providers that help us run the platform, and only as needed:

• Database hosting (Neon) and our application hosting provider.
• AI model providers named above.
• Email delivery (Google Gmail SMTP, or Resend as a backup).
• Meta, when a business connects WhatsApp.

We may also disclose information if required by law, to protect our rights or users' safety, or as part of a business transfer, in which case this policy continues to apply.

Some providers process data outside Pakistan. We choose providers with appropriate security measures.

• Account, knowledge, conversation and lead data is kept while the customer's account is active, or until the customer deletes it.
• Deleting an assistant deletes its conversations and leads. Removing a document removes its search data.
• Password reset links expire after 1 hour, and only a hash of the link is stored.
• Demo requests are kept for as long as needed to follow up and keep business records.

When an account is closed, we delete or anonymise its data within a reasonable period, unless we must keep some of it by law.

Passwords are stored as salted hashes, logins use signed cookies, WhatsApp access tokens are encrypted, and data is sent over encrypted connections. Each company can only see its own assistants, chats and leads. No system is perfectly secure, so please keep your password private and tell us straight away if you suspect misuse.

You can ask us to access, correct, export or delete your personal information, or to stop contacting you. Email corp@codeaex.com and we will respond within a reasonable time.

If you chatted with a business's assistant, please contact that business first, as it controls that conversation. We will help the business respond to your request.

ChatDesk is intended for businesses and is not directed at children under 13. We do not knowingly collect their information. If you believe a child has shared personal information, contact us and we will delete it.

We may update this policy as the service changes. We will change the date at the top and, for significant changes, tell customers by email or in the dashboard.

Questions or requests about privacy? Email corp@codeaex.com, call +92 316 429 2124 or +92 313 422 1746, or write to Codeaex, Lahore, Pakistan. We aim to reply within 3 business days.