Privacy Policy
Learn how MasterDesk.ai collects, processes, protects, and respects your business and customer data.
Zero Public Model Training Guarantee
MasterDesk.ai does NOT sell your customer data, business documents, or conversation transcripts to third parties, nor do we use your proprietary data to train public foundation artificial intelligence models. Your information is isolated within your dedicated organization tenant.
1. Introduction & Overview
MasterDesk.ai Inc. ("MasterDesk", "we", "our", or "us") provides an AI virtual front desk platform that enables organizations to automate customer interactions, qualify inquiries, and schedule appointments.
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you access our website (masterdesk.ai), use our software-as-a-service applications, or interact with an embedded MasterDesk AI front desk widget deployed by our business customers.
2. Information We Collect
A. Account & Administrative Data
When you register an account, we collect your name, business email address, company name, phone number, password hash, and billing details (processed securely via our PCI-compliant payment gateway).
B. Customer Front Desk Interactions
When end-users interact with a MasterDesk virtual receptionist, we collect conversation transcripts, inquiry text, requested appointment times, contact details provided (name, email, phone), and lead qualification answers.
C. Organization Knowledge Base Content
Documents, business hours, FAQ sheets, service descriptions, and pricing guidelines uploaded by administrators to ground the AI front desk in factual information.
D. Technical & Device Telemetry
IP addresses, browser type, operating system, referrer URL, timestamps, session duration, and anonymous usage telemetry required for load balancing and denial-of-service defense.
3. How We Use Your Information
- To operate, maintain, and deliver the MasterDesk AI virtual front desk features and scheduling engine.
- To validate calendar availability and prevent double-booking collisions in real time.
- To generate lead scores, notification alerts, and automated follow-up tasks for your staff.
- To provide live staff takeover functionality and WebSocket synchronization in the Live Inbox.
- To authenticate authorized staff users and enforce role-based access permissions.
- To prevent fraud, security breaches, unauthorized abuse, and bot attacks.
4. AI Data Privacy & Model Safeguards
We take artificial intelligence confidentiality seriously. When your organization uses MasterDesk:
Each organization's knowledge base and conversation history are logically isolated using tenant-scoped database keys.
Customer data is processed via enterprise API agreements that prohibit provider-side model training or data retention beyond inference caching.
6. Data Security & Multi-Tenant Isolation
We implement industry-standard physical, organizational, and technological safeguards to protect personal data against unauthorized access, loss, or alteration:
- Encryption in Transit: All HTTP and WebSocket connections are encrypted using TLS 1.3.
- Encryption at Rest: Customer databases and backups are encrypted using AES-256 bit keys.
- Role-Based Access Control (RBAC): Strict authentication controls limiting internal employee access to customer systems.
- Automated Backups: Point-in-time recovery and geographically distributed redundant backups.
7. Data Retention & Deletion Rights
We retain organization data for as long as your account remains active. When an organization cancels their subscription or requests data purging:
- Account data and knowledge base documents are marked for deletion immediately upon account closure.
- Customer transcripts and appointment records are permanently purged from active databases within 30 days.
- Backups are rotated out and permanently expunged according to our 60-day immutable backup lifecycle.
8. GDPR & CCPA/CPRA Privacy Rights
Depending on your location, you hold statutory rights regarding your personal data:
• Right of Access & Portability: Request an export of your stored business and customer records.
• Right to Rectification: Correct inaccurate or incomplete business profile information in your dashboard.
• Right to Erasure ("Right to be Forgotten"): Request full deletion of your organization's records.
• Right to Opt-Out: Exercise your preference to restrict non-essential cookies and analytics.
10. Contact Our Data Protection Team
If you have questions, data requests, or compliance inquiries regarding this Privacy Policy, please contact our Data Protection Officer:
MasterDesk.ai Inc. — Privacy & Compliance Division
Email: privacy@masterdesk.ai
Legal Inquiries: legal@masterdesk.ai
Physical Address: 548 Market St, Suite 3000, San Francisco, CA 94104, USA