Privacy policy
Effective October 27, 2026
This policy explains what personal data Rebutdesk ("we") handles when you visit this website or use Rebutdesk Cloud, the hosted version of Rebutdesk. Self-hosted installations run on your own infrastructure; we receive no data from them.
Two roles
For your account, billing and website visits, we decide how data is used and act as the controller. For the content your workspace stores, such as your buyers' messages, orders and dispute records, you are the controller and we process it only on your instructions to provide the service.
What we collect
- Account data: your name, email address and, if you sign in with Google or GitHub, the basic profile those services share with us.
- Workspace content: cases, messages, notes, tags, order and payment records, and files that you or your connected channels add.
- Billing data: your plan, subscription status and the customer id our payment provider assigns. We never receive your full card number.
- Technical data: IP address and user agent, used for sign-in security, rate limiting and abuse prevention.
- Waitlist: the email address you submit and which page you used.
How we use it
- To provide, secure and support the service you signed up for.
- To send service email, such as sign-in codes and billing notices.
- To bill your subscription through our payment provider.
- To contact waitlist members about access. You can ask to be removed at any time.
We do not sell personal data, and we do not use your workspace content to train AI models.
Cookies
The application sets a session cookie needed to keep you signed in. This website sets no tracking cookies. It counts anonymous page views with Counterscale, which we host ourselves on Cloudflare: no cookies, no local storage and no IP addresses are kept, only the page, the referring site and rough browser and country information.
Service providers
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, networking and file storage |
| Yugabyte (on Google Cloud, United States) | Database |
| Amazon Web Services (SES) | Sending and receiving email |
| Creem | Checkout, payments, invoicing and tax, as merchant of record |
| Google, GitHub | Sign-in, only if you choose them |
| AI model providers you configure | Drafting and summarising, only when you enable AI with your own key |
Data may be processed in the United States and other countries where these providers operate, under their standard contractual protections.
Retention
We keep account and workspace data while your account is active. When you delete a workspace or close your account, we delete its content within 30 days, apart from backups that expire on their own cycle and records we must keep for tax or legal reasons.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to how we use it. Emailprivacy@rebutdesk.com. If you are a buyer whose data a Rebutdesk customer stores, contact that store first; we will help them respond. You can also complain to your local data protection authority.
Changes
We will post changes here and update the effective date. For material changes we will also email account owners.