Privacy Policy

1.Who we are

Great Developers Info Tech Pvt Ltd, C 110, Sector 65, Noida 201301, Uttar Pradesh, India, operates SupaDesk. For personal data about visitors to this website and about the people who administer a SupaDesk account, we are the data controller.

For the support conversations our customers handle in their own workspaces - which contain personal data about their customers - our customer is the controller and we act as a processor on their instructions.

2.What we collect

We collect only what we need to run the service and the business behind it.

• Account data: name, work email, company, role, and password hash or SSO identifier.
• Billing data: billing name and address, tax identifiers, and the last four digits and expiry of a card. Full card numbers are handled by our payment processor and never reach our servers.
• Usage data: pages viewed, features used, and error diagnostics, tied to your account so we can support you.
• Content: the tickets, messages, attachments, contacts and settings in your workspace.
• Enquiry data: what you send us through the contact and demo forms.
• Website analytics: aggregate visit data, collected only after you accept cookies.

3.Why we process it, and on what basis

Under the GDPR and comparable laws our lawful bases are as follows.

• To provide the service you subscribed to - performance of a contract.
• To bill you and meet tax and accounting obligations - legal obligation.
• To secure the service, prevent abuse and debug faults - legitimate interests.
• To send product and marketing email - consent, which you can withdraw at any time via the unsubscribe link.
• To place non-essential cookies - consent, given through the cookie banner.

4.AI features and your content

AI features are off until an administrator enables them. When enabled, the text of the ticket or draft an agent asks about is sent to an AI model to classify, summarise or rewrite it for that same workspace. It is not used to train shared or third-party models, and it is never exposed to another customer.

Internal notes are never sent for summarisation. AI prompts and responses are retained for 30 days for troubleshooting, then deleted, and AI can be switched off entirely at any time.

5.How long we keep it

We keep personal data only as long as we need it.

• Account data: for the life of the account, then 30 days.
• Content and backups: 30 days after cancellation for export, then deleted from primary storage and purged from backups within a further 30 days.
• Billing records: eight years, as required by Indian tax law.
• Support and enquiry correspondence: 24 months.
• Website analytics: 14 months in aggregate form.

6.Who we share it with

We do not sell personal data. We share it only with sub-processors who help us run the service, each under a written agreement that restricts their use of it. Categories include cloud hosting, email delivery, payment processing, error monitoring and, where enabled, AI inference.

The current sub-processor list is available on request and is attached to our Data Processing Agreement. We give notice before adding a new sub-processor so you can object.

7.Where your data is held

Your workspace's hosting location is stated in your order or on request. Content and its backups stay in that location, and Enterprise customers can agree a location contractually.

Where personal data is transferred out of the EEA or the UK, we rely on Standard Contractual Clauses with appropriate supplementary measures.

8.Your rights

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent.

To exercise a right, email privacy@supadesk.in. We respond within 30 days. If we cannot act on a request we will explain why. If you are unhappy with our response you may complain to your local supervisory authority.

If you contacted one of our customers' support desks, please raise the request with that company - they are the controller of that conversation and we will assist them in responding.

9.Cookies

Essential cookies keep you signed in and remember your consent choice; these are always set. Analytics cookies are set only after you accept them in the banner, and you can change your mind by clearing cookies for this site.

We do not use advertising cookies or third-party trackers on this website.

10.Security

Data is encrypted in transit with TLS 1.2 or higher and at rest with AES-256. Access to production systems is limited to named engineers, logged and reviewed quarterly. Our security page describes the controls in more detail.

If a personal data breach affects you, we will notify you and, where required, the relevant supervisory authority, within the timeframes the law requires.

11.Children

SupaDesk is a business product and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we will delete it.

12.Changes and contact

We will post any change to this policy on this page and update the effective date. Where a change is material we will email account administrators at least 30 days in advance.

Privacy questions and requests: privacy@supadesk.in. Grievance officer contact details for users in India are available on request and will be published here before launch.