Privacy notice

Who we are

ABITDesk is an IT help desk service. Questions about this notice or your data: hello@abitdesk.com.

Organizations use ABITDesk to run their own help desk. For the requests and other content in an organization's workspace, that organization decides what is collected and why; ABITDesk stores and processes it on their behalf. If you use ABITDesk through your employer, contact your organization's administrator first about that content.

What we store

• Your account: name, email address and a securely hashed password (we never store or see the password itself).
• Sign-in sessions: your IP address and browser details, to keep you signed in and protect your account.
• Your workspace membership: organization, role, and the location and IT teams your administrator sets.
• Help desk content: requests, replies, internal notes, their history, knowledge base articles and “was this helpful” votes.
• Activity records: in-app notifications, an audit log of administrative changes, and short-lived counters that limit how often an account can perform actions.
• Email records: which notification was sent to whom and whether it was delivered, not the message itself.

We do not use advertising or analytics trackers, and we do not sell personal data.

Why we use it

• to provide the help desk service you or your organization use,
• to keep accounts and workspaces secure and separate,
• to send notifications about requests you are involved in, which you can choose under Account,
• to answer support questions and investigate problems.

Cookies

We use only cookies that are needed for the service to work: one that keeps you signed in, and one that remembers which workspace you have open. Your light or dark theme choice is stored in your browser, not on our servers.

Where data is stored and who processes it

• Vercel hosts the application (servers in Frankfurt, Germany, with Vercel's global network delivering pages).
• Neon hosts the database (Frankfurt, Germany) and its backups.
• Resend delivers our emails (sent from its Ireland region). It receives the recipient's email address and the message: invitation and password reset links, and request notifications with the organization and person names involved, the request number, subject and a link, never the description, replies or notes.

How long we keep it

• Sign-in sessions end after 7 days and are then deleted.
• Password reset links expire after one hour.
• Unused invitations are deleted 30 days after they expire or are withdrawn.
• Email delivery records are deleted after 30 days.
• Help desk content and accounts are kept while the organization uses ABITDesk, or until deletion is requested.

Your choices and rights

You can ask to see, correct, export or delete your personal data. Administrators can download all of their organization's data under Settings → Export your data. For anything else, write to hello@abitdesk.com from the email address of your account. Depending on where you live, you may also have the right to complain to your data protection authority.

Security

Every workspace is separate: access is checked on the server for every request, and the database refuses links between organizations. Connections are encrypted (HTTPS), passwords are hashed, sign-in and other actions are rate-limited, and administrative changes are recorded in an audit log.

Children

ABITDesk is a business service and is not meant for children.

Changes

When we change this notice we update the date at the top. Questions? Contact support.