1. Who We Are
Deskloc is a product of AMBIZENT FZC LLC, a company registered in the ANC Free Zone, Ajman, United Arab Emirates. We operate the Deskloc suite of business applications, including Deskloc Flow, available at deskloc.com and flow.deskloc.com.
For any privacy-related enquiries, contact us at info@deskloc.com.
2. Information We Collect
2.1 Information you provide directly
- Account registration: name, email address, company name, phone number.
- Business data: invoices, customer records, vendor records, transaction history, tax details, bank account details you enter into Deskloc Flow.
- Payment information: billing address and payment method details (processed by our payment provider — we do not store full card numbers).
- Communications: messages you send us via the contact form or email.
- Waitlist sign-ups: email address and the product you expressed interest in.
2.2 Information collected automatically
- Usage data: pages visited, features used, actions taken within the app, session duration.
- Device and browser data: IP address, browser type, operating system, device identifiers.
- Cookies and similar technologies: see Section 8 below.
3. How We Use Your Information
- Provide, operate and improve Deskloc products and services.
- Process transactions and send related information (receipts, invoices, account notices).
- Authenticate users and prevent fraud or unauthorised access.
- Respond to enquiries and provide customer support.
- Send product updates, feature announcements and marketing emails (you can opt out anytime).
- Comply with legal obligations under UAE law.
- Analyse usage to improve product performance and user experience.
4. Legal Basis for Processing
We process your data on the following legal bases:
- Contract: to provide the services you have signed up for.
- Legitimate interests: to improve our products, prevent fraud and secure our systems.
- Consent: for marketing communications and non-essential cookies.
- Legal obligation: to comply with UAE laws including VAT and corporate tax requirements.
5. How We Share Your Information
We do not sell your data. We share information only with:
- Service providers who help us operate Deskloc (cloud hosting, email delivery, payment processing, analytics) under strict confidentiality.
- Legal authorities when required by UAE law, court orders, or to protect the rights, property, or safety of Deskloc, our users, or others.
- AI processing partners (such as Anthropic) for AI-powered features. Data sent to these providers is processed under their data protection terms and not used to train public models.
- Business transfers in the event of a merger, acquisition, or sale of assets — with notice to you in advance.
6. Data Storage and Security
Your data is stored on enterprise-grade infrastructure hosted in the Southeast Asia (Singapore) region. We use industry-standard security measures including:
- TLS 1.3 encryption in transit.
- AES-256 encryption at rest.
- Row-level security in our database ensuring isolation between businesses.
- Role-based access control within each business account.
- Industry-standard authentication using JWT tokens and secure HTTP-only cookies.
No system is 100% secure. While we take strong measures to protect your data, we cannot guarantee absolute security and disclaim liability to the extent permitted by UAE law.
7. Your Rights
Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data (subject to legal retention obligations).
- Object to or restrict certain processing.
- Export your data in a portable format.
- Withdraw consent for marketing emails at any time.
- Lodge a complaint with the UAE Data Office if you believe your rights have been violated.
To exercise any of these rights, contact info@deskloc.com. We will respond within 30 days.
8. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies — required for authentication and core app functionality. Cannot be disabled.
- Analytics cookies — to understand how users interact with our products. You can opt out at any time.
- Preference cookies — to remember your settings (theme, language).
You can control cookies through your browser settings. Disabling essential cookies may prevent some features from working.
9. Data Retention
We retain your data for as long as your account is active. After account closure:
- You can export your data at any time before closure.
- Data is retained for 90 days post-closure to allow account recovery.
- After 90 days, data is permanently deleted, except where legal retention obligations apply (e.g. UAE tax records retained for 5 years as required by the FTA).
10. Children's Privacy
Deskloc is intended for business use only. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact info@deskloc.com and we will delete it promptly.
11. International Data Transfers
Your data is processed primarily in the Southeast Asia (Singapore) region. When we transfer data internationally to service providers, we ensure adequate protection through contractual safeguards in line with UAE Personal Data Protection Law requirements.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice at least 14 days before they take effect. Continued use of our services after changes take effect constitutes your acceptance of the revised policy.
13. Contact