Privacy Policy · ReDeskAI

Which part applies to you?

If you chatted with an AI assistant on a property or letting website, read section 3. That business — not ReDeskAI — decides what happens to your information, and is who you should contact about it.

If you have a ReDeskAI account, sections 2 and 4 onwards apply to you.

1. Who we are

ReDeskAI provides AI assistants that property managers and letting agents embed on their own websites to answer questions from prospective renters and capture enquiries.

Our role depends on whose data it is. For our customers' own account information we are the data controller. For information about visitors who chat with a customer's assistant, that customer is the controller and we act as a data processor on their instructions — we hold and process it to provide the service to them, and we do not decide what it is used for.

2. Customer account data

When you create a ReDeskAI account we collect and store:

Identity and contact data — name, email address, business name.
Authentication data — a password hash (never the password itself), or a Google account identifier if you sign in with Google.
Billing data — your plan, subscription status and billing history. Card details are handled by Stripe and never reach our servers.
Content you provide — the documents, FAQs, property details and assistant configuration you upload to train your assistants.
Technical and usage data — IP address, browser type, and records of how the dashboard is used, for security and support.

3. If you chatted with an assistant

When you send a message to an AI assistant powered by ReDeskAI, the business operating that website is responsible for your information. We process it on their behalf. What is collected:

The conversation itself — every message you and the assistant exchange, kept so the business can read the enquiry and follow up.
Contact details you provide — name, email address and phone number, when you choose to share them.
What you tell the assistant — budget, timescale, preferred area and similar details, which may be used to score how likely you are to rent.
Technical data — IP address and browser information, used to keep the chat session working and to prevent abuse.

Replies are generated by an AI model and may be inaccurate. Do not rely on them for decisions without confirming with the business, and please do not share payment details, identity documents or any sensitive personal information in a chat.

To access, correct or delete your information, contact the business whose website you were on — they control it and can action your request. You may also write to us at redeskaiplatform@gmail.com and we will pass your request to them and support them in answering it.

4. Why we process data

To provide the service and perform our contract with our customers.
To take payment and manage subscriptions.
For our legitimate interests in keeping the service secure, preventing abuse, and improving how it works.
To comply with our legal obligations.

We do not sell personal data, and we do not use the contents of customer knowledge bases or visitor conversations to train our own AI models.

5. Who we share data with

We use a small number of service providers to run the platform. Each processes data only as needed to provide their part of it:

AI model providers — to generate assistant replies from your messages.
Stripe — payment processing and subscription billing.
Resend — transactional email such as verification and notifications.
Supabase — file storage for uploaded knowledge documents.
Railway — application and database hosting.

Some of these providers operate outside your country, so your information may be transferred internationally and protected by appropriate safeguards.

6. How long we keep it

Conversations and enquiry records — kept while the customer's account is active, as they are the customer's business records. The customer can delete them at any time.
Account data — kept while the account is open, then deleted within 90 days of closure, except where we must keep it longer.
Billing records — kept as long as tax and accounting law requires, typically seven years.

7. Your rights

Depending on where you live, you may have the right to access a copy of your personal data, correct it, have it deleted, object to or restrict how it is processed, and receive it in a portable format. You can also complain to your local data protection authority.

Account holders can exercise these rights by contacting us. If you chatted with an assistant, contact the business whose website you were on, as described in section 3.

8. Security

Data is encrypted in transit, passwords are stored only as hashes, and each customer's data is isolated from every other customer's. No system is perfectly secure, but we will tell affected users and the relevant authority about a breach where the law requires it.

9. Cookies

We use only what the service needs to function: a cookie holding your session so you stay signed in, and local browser storage for your profile and preferences. The chat widget stores a session identifier so a conversation survives a page refresh. We do not use advertising or cross-site tracking cookies.

10. Children

The service is intended for business use and is not directed at children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes and contact

If we make a significant change to this policy we will update the date above and notify account holders. For anything relating to privacy, write to redeskaiplatform@gmail.com.