Privacy Policy

Last updated: June 17, 2026

This Privacy Policy explains how yundadesk collects, uses, stores, shares, transfers, publicly discloses and protects personal information and business data when you visit the website, register or log in, book a demo, use the products or communicate with us. We value data security and privacy protection and process information only as necessary for the service purposes described below.

1. Scope

This Policy applies to the yundadesk website, product pages, online forms, demo booking, account registration and login, web or client products, plugins, APIs, customer support, marketing activities and related services.
If you connect third-party platforms, social media, storefronts, payment, logistics, AI, cloud services or other external services through yundadesk, those third parties may independently collect and process information under their own privacy policies and service terms.
This Policy does not apply to websites, applications or services independently operated by third parties and not controlled by yundadesk, even if they are linked from yundadesk pages or products.

2. Information Collection and Use

Information you provide: name, company, title, country or region, contact details, email, phone number, business needs, booking content, consultation records, feedback, contract and invoicing information.
Account, organization and business information may include account identifiers, login credentials, team members, roles, workspaces, plans, payment status, channel authorization status, administrator settings, customer contacts, conversations, tags, notes, order or lead fields, knowledge bases, automation rules, marketing content, attachments and imported or synced data.
Device and log information may include IP address, browser type, device model, operating system, language settings, access time, click behavior, referral page, cookies, local storage, pixels, SDK logs, error logs, API calls, login records and security audit records.
We use the information to create and manage accounts, verify identity, activate trials or plans, provide support, process payment and invoicing, aggregate messages, display customer context, support AI reply suggestions, run automation, analyze usage, improve products, protect security and send necessary service notices.
We do not actively request sensitive personal information unrelated to the services. If your business scenario requires sensitive data processing, you must ensure lawful authorization and carefully configure access permissions and data scope.

3. Links

The yundadesk website, applications or products may contain links to third-party websites, apps, channels, help documents, payment pages, social media or integration services.
Third-party services are independently responsible for their privacy protection, content security, data processing, cookies, SDKs and user-rights rules, and are not governed by this Policy.
Before visiting or using third-party services, you should review and evaluate their privacy policies, service terms and data-processing rules.

4. Children

yundadesk is primarily intended for businesses, merchants and professional teams and does not actively provide services to children or collect children's personal information.
If a child needs to use the relevant services, this should occur with consent and guidance from a parent or guardian.
If we discover that we have collected children's information without a lawful basis, explicit guardian consent or necessity to protect the child, we will delete it or take other necessary measures as required by law.

5. Transfer, Sharing and Public Disclosure

We do not sell your personal information. To provide the services, we may disclose necessary information to, or entrust processing to, cloud infrastructure providers, SMS or email providers, payment and invoicing providers, customer support tools, analytics, security and risk control providers, AI models, messaging channels, storefronts, logistics, CRM and technical service providers.
We require partners to follow contracts, confidentiality obligations, security requirements and applicable law, and to process information only for agreed purposes.
If you authorize third-party channels or apps, yundadesk will exchange necessary data with those third parties according to your configuration. You must also comply with their rules on data, messaging, marketing and user authorization.
In a merger, separation, acquisition, asset transfer, financing, bankruptcy liquidation or similar transaction, if personal information is transferred, we will require the new holder to remain bound by this Policy or obtain your consent as required by law.
We generally do not publicly disclose personal information or business data, except where required by law, courts, administrative or regulatory authorities, public safety, protection of lawful rights, major security incidents, or your active disclosure or authorization.

6. Security Measures

We use access controls, permission tiers, encryption in transit, log audits, backups, anomaly monitoring, security scanning and staff confidentiality management to reduce risks of unauthorized access, leakage, alteration, loss or misuse.
The internet is not absolutely secure. If a security incident may affect your rights, we will take remedial measures as required by law and notify you by email, in-product notice, announcement or other reasonable methods with information about the incident, possible impact and recommended actions.
You should also protect accounts, passwords, verification codes, API keys, channel credentials and administrator permissions, and configure member permissions, data export permissions and automation rules appropriately.

7. Managing Personal Information

Subject to applicable law, you may request access, correction, supplementation, deletion, copying, portability, restriction of processing, withdrawal of consent, account deletion or an explanation of our personal information processing rules.
You may manage member permissions, channel authorization, cookies, marketing subscriptions, data import/export and some automation configurations in product settings. Some requests may not be completed immediately due to legal requirements, contract performance, security audits, disputes or technical limits.
If you are an end user of a yundadesk business customer, such as a website visitor, consumer or contact, please contact that business customer first. We will reasonably assist the business customer in responding to your request.

8. Retention of Information and Data

We retain information only for as long as necessary to fulfill this Policy, perform contracts, satisfy legal requirements, handle disputes, complete audits or protect security. After that period, we will delete, anonymize or otherwise process information as permitted by law.
Retention periods for projects, workspaces, channels, conversations, contacts, knowledge bases, attachments, logs and billing data may differ depending on plan, product configuration, active deletion, account cancellation, service expiration, backup policy or legal requirements.
After account cancellation or service termination, we will delete or anonymize relevant data subject to legal, contractual, backup, security audit and dispute handling requirements.

9. Cross-Border Transfers

Because yundadesk supports cross-border business and global customer communication, data may be transferred across borders depending on customer regions, team locations, third-party channels, cloud nodes, AI services or integrated systems you select.
We will take measures required by applicable law, such as data processing agreements, permission controls, transmission encryption, access audits, transfer minimization and security assessments, to protect data during cross-border processing.
You are responsible for giving customers, employees or end users sufficient notice about cross-border transfers and obtaining consent or completing other compliance steps when required by law.

10. Changes

We may update this Policy due to product changes, laws and regulations, regulatory requirements, third-party rules or business arrangements. Material changes will be announced through the website, in-product notices, email or other reasonable methods.
If you continue using yundadesk, you acknowledge and accept the updated Policy. If you do not agree with the update, you should stop using the affected services.
For questions about privacy, data security, personal information rights or this Policy, contact the yundadesk team through the contact information shown on the website.

11. App Permissions and Device Information

To provide app features, we may access camera, photos, files, microphone, notifications, clipboard, local storage, network status, device identifiers or push tokens after you authorize them.
Camera, photos and file permissions are used to send images, videos, attachments, ticket materials or chat assets. Notifications are used for new messages, tickets, tasks, system security and service reminders. Local storage is used for login state, language preferences and some offline data.
You can disable permissions in device or browser settings. After disabling a permission, we will no longer collect information through that permission, but the corresponding feature may not work.

12. Third-Party SDKs and Integration Data

To provide login, security, messaging, analytics, payment, support, AI, cloud storage or channel connection capabilities, we may integrate third-party SDKs, APIs or service providers.
Third-party SDKs may collect device information, network information, logs, crash information, payment status or push identifiers depending on their function. We evaluate their data security capabilities and require processing only for agreed purposes and under applicable law.
When you authorize third-party channels, storefronts, CRM, logistics or payment systems, we receive, store, display, sync or return necessary data according to your configuration. You can manage or cancel some authorizations in product settings.

13. Customer Data and Processing on Behalf

For customer contacts, conversations, orders, tags, notes and business fields imported, synced or received through channels, you are usually the data controller or business decision-maker, and yundadesk processes the data as a service provider under your instructions and this Policy.
You must ensure that customers, visitors, employees or other data subjects have been properly notified and authorized, and that use, sending, analysis or export of data through yundadesk complies with law and third-party platform rules.
If you receive data-subject requests, regulatory inquiries or complaints, we will provide reasonable technical assistance, but we do not replace your compliance responsibility as data controller.

14. Automation, AI and Model Data

When you use AI reply suggestions, automatic classification, smart routing, knowledge Q&A, translation, summaries or marketing suggestions, we may process conversation content, knowledge bases, tags, order fields and context to generate or improve results.
Unless separately agreed or authorized, we do not use your enterprise customer's raw business data to train public models for other customers. To improve safety, quality and stability, we may use de-identified, anonymized or aggregated data for evaluation and improvement.
AI outputs are for assistance only. You should review content that is automatically sent, manually adopted or externally displayed, and configure human confirmation, sensitive-word controls, permissions and logs according to business risk.

15. Account Cancellation and Data Deletion

You may request account cancellation, workspace deletion or specific data deletion through the product path or by contacting us. Before cancellation, you should handle open orders, subscriptions, channel authorizations, customer communications, bills, invoices and data exports.
After account cancellation or service termination, we will stop providing relevant product capabilities and delete or anonymize data subject to legal, contractual, backup, security audit and dispute handling requirements.
Some information may continue to be retained for necessary periods due to backups, logs, security audits, financial records, compliance retention or dispute resolution, but access will be restricted and protected.

16. Data Subject Request Process

When you submit a request for access, correction, deletion, copying, withdrawal of consent, account cancellation or other personal information rights, we may need to verify your identity, account permissions or request scope.
We generally respond within the period required by applicable law. If the request is complex, numerous or involves third-party systems, we may reasonably extend the processing time and explain the reason.
For requests that are groundlessly repetitive, beyond reasonable technical capability, affect others' lawful rights, violate legal requirements or involve trade secrets or security audits, we may lawfully refuse or only partially fulfill them.

17. Contact and Complaints

For questions about this Policy, personal information processing, data security, third-party SDKs, cross-border transfers or rights requests, contact the yundadesk team through the contact information shown on the website.
To protect accounts and data security, we may require necessary materials to verify your identity and authorization scope.
If you believe our processing harms your lawful rights, you may also seek resolution through complaint, reporting or dispute resolution channels available under applicable law.