Privacy policy

Last updated: 7 November 2026

Deskhall is the professional virtual office for remote teams. This page says exactly what we collect, why, and how to have your data removed. Contact us any time at deskhallhq@gmail.com.

What we collect

• Early-access (waitlist) list: your email address, an optional company name, the page you signed up from, and the time you joined.
• When you create or join an office: your name, email address, and the content you put into the product (tasks, messages, files, attendance records). If you sign in with Google, we receive your name, email address and profile picture from Google - nothing else.
• Technical data: standard hosting logs and a bot-protection check (Cloudflare Turnstile). We store a one-way hash of your IP address for rate limiting - never the raw IP.

How we use it

• Waitlist emails are used only to send your early-access invitation. Nothing else.
• Account and product data is used only to run the service for your team.
• We never sell your data and never share it for advertising.

Who processes it

• Cloudflare (hosting and bot protection) and Supabase (database and sign-in) process data to run the service. Their own privacy policies apply to that processing.
• Google, only if you choose "Sign in with Google".

Removal

Email deskhallhq@gmail.com from the address you registered with and we remove your data within 72 hours, confirmed by reply. Waitlist emails also carry an unsubscribe link once invitations begin.

Retention and security

We keep data only while your office or waitlist entry exists. Passwords are bcrypt-hashed by our auth provider (Supabase), sessions expire, access is role-based and org-scoped, and TLS protects data in transit. Multi-factor authentication and end-to-end encryption are on the roadmap, not yet in the product.

Changes

If this policy changes, we update the date above and say what changed. For any question: deskhallhq@gmail.com.