Legal

Privacy Policy

Last updated August 21, 2026

This Privacy Policy explains how Deskhand LLC, a Wisconsin limited liability company (“DeskHand,” “we,” “us,” “our”), collects, uses, shares, and protects information when you use our business-management software for home-service businesses (the “Service”). It applies to the business owners and staff who use DeskHand, and to the customer information they manage in it.

1. Information we collect

1.1 Information you give us

  • Account information: your name, email, phone, and password when you sign up — or the basic profile Google shares if you sign in with Google.
  • Business and customer data: your business details and the customer records you create — names, phone numbers, email and mailing addresses, job and service history, invoices, notes, and documents you upload.
  • Payment information: when you or your customers pay through the Service, card details are processed and stored by our payment processor, Stripe. We receive only limited information such as the last four digits, card brand, and confirmation of payment — never full card numbers.
  • Communications: messages you send to support, feedback you submit, and content you share with your customers through the Service, such as invoices and receipts.

1.2 Information we collect automatically

  • Usage data: pages visited, features used, and timestamps.
  • Log and device data: IP address, browser and user-agent, and request timestamps, kept for security and debugging.
  • Browser storage: we store a secure sign-in token in your browser to keep you logged in. We do not use third-party advertising cookies inside the app.

1.3 Information from third parties

  • Google (for sign-in): if you sign in with Google, we receive your email and basic profile to create or authenticate your account.
  • Stripe (for payments): when a payment is made, Stripe shares confirmation and limited transaction details so we can mark the invoice paid.

2. How we use your information

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • Create and send invoices and process the payments you and your customers initiate.
  • Send transactional messages such as receipts, invoice notifications, and account notices.
  • Respond to support requests and communicate with you about your account.
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not use your business, customer, or financial data to train AI models for use outside your account.

3. How we share information

We share information only as needed to operate the Service, with these categories of recipients:

  • Service providers: Google Cloud Platform (hosting and storage), Firebase (authentication), Stripe (payment processing), and the email/SMS providers we use to deliver notifications.
  • With your customers: information you choose to share with a customer through the Service — such as an invoice or receipt — is visible to that customer.
  • Legal: when required by law, subpoena, or court order, or to protect our rights or the safety of others.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, in which case we will give you notice.

4. Your data and data ownership

Your business’s data belongs to you. You can export your customers, invoices, and payment records at any time, and we build the Service so your data stays portable rather than locked in.

Each business’s data is isolated from every other business’s at the database level. We enforce this tenant isolation so that one account can never see another account’s records.

5. Data retention

We keep your information for as long as your account is active and for a reasonable period afterward to satisfy tax, accounting, and legal obligations. You can request deletion of your account at any time by emailing hello@deskhandhq.com. Some records, such as transactions required by tax law, may be retained for the period the law requires.

6. Security

We take reasonable measures to protect your information, including encryption in transit (TLS) and at rest, per-business data isolation, scoped access controls, and audit logging. No system is perfectly secure; if we discover a breach that affects your data, we will notify you in accordance with applicable law.

7. Your rights

You have the right to:

  • Access the personal information we hold about you and request a copy.
  • Correct inaccurate or incomplete information.
  • Request deletion of your account and personal information (subject to legal retention).
  • Object to or restrict certain processing, including opting out of non-essential messages.

To exercise any of these rights, email hello@deskhandhq.com. We will respond within 30 days.

8. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe we have, please contact us and we will delete it.

9. International users

We operate in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., where data-protection laws may differ from those in your country.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect. The “Last updated” date at the top of this page shows when the policy was last revised.

11. Contact us

Questions about this policy or our privacy practices? Email hello@deskhandhq.com or visit deskhandhq.com.