This policy explains the information EmailDesk processes to operate its public website, customer workspaces, business mailboxes, sending paths, protection, and support.
Reviewed: July 29, 2026EmailDesk may process account names, email addresses, workspace details, assigned roles, domains, DNS evidence, mailbox settings, contacts, templates, campaigns, message headers, bodies, attachments, delivery events, provider responses, and usage records when those features are used.
Customer administrators control which users, domains, mailboxes, contacts, senders, and integrations are added to their workspace.
The service records information needed for authentication, rate limits, two-factor checks, trusted-device handling, audit logs, spam and protection decisions, bounces, complaints, suppressions, quota events, billing evidence, support, and recovery.
Login and audit records can include an IP address and user agent. Delivery evidence can include sender and recipient addresses, domains, provider identifiers, responses, and timestamps.
When a public analytics provider is configured, EmailDesk accepts only the event name, source-page path without query or fragment data, an anonymous session identifier, device category, and timestamp.
The public analytics payload does not contain form values, names, email addresses, domains, credentials, referrers, cookies, request IP addresses, or user-agent strings. Browser collection respects Do Not Track and Global Privacy Control and fails safely when analytics is disabled.
An authorized user can request AI assistance for supported writing or review workflows when the feature is configured. The resulting request may be sent to the configured AI provider.
Automated outbound shadow review is metadata-only by default: it can use domains, hashes, lengths, link domains, attachment extensions and counts, and policy labels without sending raw message bodies, raw subjects, complete email addresses, or attachment filenames. Body-level review requires an explicit server configuration.
Authorized customer administrators can manage workspace data and users. Authorized platform administrators may access relevant records for support, security, billing, recovery, abuse handling, and system administration.
EmailDesk may transmit the information required to configured email gateways, recipient mail systems, DNS and mailbox infrastructure, analytics providers, AI providers, or other service processors used for the requested function. EmailDesk does not sell customer contact lists.
An authorized customer administrator may request access, correction, export, or deletion through the authenticated support desk. Requests can be limited by security, billing, legal, backup, abuse-prevention, and platform-integrity requirements.
Do not include passwords, API keys, SMTP credentials, mailbox app passwords, or unrelated message content in a privacy request.