01Who we are
Growth Desk is a trading name of Automation Wizards - FZCO, a free zone company registered in Dubai Silicon Oasis, Dubai, United Arab Emirates (licence number 53505). Registered address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates.
In this policy, “Growth Desk”, “we”, “us” and “our” mean Growth Desk, the business described above.
For anything about your personal data, email hello@growthdeskteam.com.
02What this policy covers
Growth Desk helps local businesses reply to new enquiries, book appointments and follow up with customers. This policy covers two groups of people:
- Visitors to this website. For this website, we decide how and why personal data is used. That makes us the controller.
- Businesses that connect their accounts to Growth Desk, and the people who message those businesses. Here we handle data on the business’s behalf and follow its instructions. The business is responsible for telling its own customers how their data is used.
If you messaged a business that uses Growth Desk, that business decides how your messages are used. You can contact the business directly, or email us and we will help.
03Visitors to this website
This website uses no cookies and no analytics. It has no forms, no advertising tags and no tracking.
When you load a page, your browser sends technical information to our hosting provider. This includes your IP address, browser type, device type, the page you asked for and the time. This is normal for any website. It is used only to deliver the page and to protect the site from misuse.
If you email us, we use what you send to reply to you.
04What we collect from connected accounts
When a business connects an account to Growth Desk, we collect only what we need to answer and follow up its enquiries:
- Message content: the text of messages sent to and from the connected account, and call recordings or transcripts where the business uses phone answering.
- Sender details: the sender’s name and contact details, such as email address, phone number or social media profile name.
- Timestamps: when messages were sent and received.
- Attachments: only where needed to understand or answer an enquiry.
- Account and Page identifiers: such as the connected email address, Facebook Page ID, Instagram account ID or WhatsApp Business number, and basic profile details needed to connect them.
- Access tokens: the keys the account provider gives us so Growth Desk can act for the business while it stays connected.
We also hold appointment and booking details that come from these conversations.
05How we use it
We use data from connected accounts only to provide the features the business sees in Growth Desk:
- answering new enquiries and customer questions;
- booking, confirming and rebooking appointments;
- following up missed or cancelled appointments, and sending offers the business chooses to its past customers;
- showing every conversation and booking in the business’s inbox, so a person can take over at any time;
- reports for the business about its enquiries and bookings;
- keeping the service secure and preventing misuse.
We do not sell this data. We do not use it for advertising. We do not build profiles of people for any other purpose.
06How we use AI
Replies are drafted by AI services that act as our processors. They handle data only to produce replies for Growth Desk, under contracts that do not allow them to use the data to train their models.
We do not use data from Google, Microsoft or Meta accounts to train general AI models. The business can review conversations, take over at any time, and pause or stop messages whenever it wants.
07Google user data and Limited Use
Growth Desk’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In plain words, for data we receive from Gmail or Google Workspace:
- We use it only to provide and improve the features the business sees: finding enquiries, drafting and sending replies, and labelling handled messages.
- We never use it for advertising, including targeted, personalised or interest-based ads.
- We do not transfer it to anyone else, except as needed to provide or improve these features, for security, to comply with the law, or as part of a merger, acquisition or sale of assets after giving notice to users.
- No person at Growth Desk, or at the account team that looks after the business’s service, reads it, except in these cases: the business has agreed to it for specific messages (for example, when it asks for a reply to be reviewed); we need to for security, such as investigating abuse; the law requires it; or the data has been aggregated and anonymised for internal operations.
- We do not sell it, transfer it to data brokers or information resellers, use it to decide creditworthiness or for lending, or use it to train general AI models.
09International transfers
Growth Desk’s servers are in the United States. We are based in the United Arab Emirates, and some of our service providers may be in other countries.
When data moves between countries, we protect it with recognised safeguards, such as standard contractual clauses where those apply, and we follow the transfer rules in the UAE Personal Data Protection Law. You can ask us for details of the safeguards we use.
10How long we keep it
- Access tokens: stop working as soon as an account is disconnected, and are deleted from our systems straight away.
- Message data and bookings: kept while the business uses Growth Desk. Deleted within 30 days of the account being disconnected or the service ending, or sooner if asked.
- Website request logs: kept by our hosting provider for a short period, for security and delivery.
- Emails you send us: kept for as long as we need them to deal with your message.
We may keep data longer only where the law requires it.
11How we keep it secure
- Data is encrypted in transit and at rest.
- Access is limited by role, to people who need it for their work.
- Access tokens and keys are stored encrypted.
No system is perfectly secure. If a breach puts personal data at risk, we will tell the business affected and the relevant authorities as the law requires.
12Your rights
Depending on where you live, you have some or all of these rights:
- Access: ask for a copy of the personal data we hold about you.
- Correction: ask us to fix data that is wrong or incomplete.
- Deletion: ask us to delete your data.
- Objection: object to how we use your data.
To use any of these rights, email hello@growthdeskteam.com. It is free. We may need to check your identity first. We reply within one month.
If you messaged a business that uses Growth Desk, you can also ask that business directly. See Data deletion for how to remove data and disconnect accounts.
You can also complain to the data protection authority where you live.
13Children
Growth Desk is a service for businesses. It is not meant for anyone under 16. We do not knowingly collect personal data from anyone under 16. If you think we have, email us and we will delete it.
14Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date at the top. If we make an important change, we will tell connected businesses before it takes effect.
15Contact us
For privacy questions and data requests, email hello@growthdeskteam.com.
By post: to the registered address in section 1.