DM DESK
Log inBook a demo

Privacy Policy

Last updated September 16, 2026

DM DESK (“DM DESK,” “we,” “us,” or “our”) is operated by DM Desk LLC, a California limited liability company. This policy explains what information we collect, how we use it, and what choices you have, whether you are a business that uses DM DESK to manage its Instagram and Messenger conversations (a “Customer”) or someone who messages a Customer's business account (an “End User”).

By using dm-desk.com, the DM DESK application, or any service connected to it, you agree to the collection and use of information in line with this policy. If you do not agree, do not use the service.

1. Information we collect

From Customers (business accounts)

  • Account information: name, email address, business name, and location details you provide when signing up.
  • Billing information: handled directly by Stripe. DM DESK does not receive or store full payment card numbers.
  • Business content: hours, FAQs, menus, pricing, house rules, and any other material you give the AI to answer questions on your behalf.
  • Usage data: how you use the dashboard, inbox, and settings, for support and product improvement.

From End Users, through Meta's Instagram and Messenger platforms

When someone messages a business that uses DM DESK on Instagram or Messenger, Meta Platforms, Inc. (“Meta”) shares certain information with us through its official APIs so the business can respond. This may include:

  • The content of the message and attachments sent to the business.
  • The sender's Instagram-scoped ID, username, and public profile information made available by Meta's API.
  • Conversation metadata: timestamps, read status, and thread history with that business.

How we use this Platform Data. Data received through Meta's APIs is used only to operate DM DESK's core features for the Customer that received the message: drafting and sending replies, organizing the inbox, capturing leads or reservations the End User volunteers, and routing complex conversations to a human. We do not use Platform Data for advertising, sell it, or share it with data brokers. Platform Data is retained only as long as needed to provide the service or as the Customer's own retention settings specify, and is deleted on request as described in Section 6 and our Data Deletion Instructions.

Automatically collected

  • Standard server logs (IP address, browser type, pages visited) for security and diagnostics.
  • Essential cookies used to keep you signed in. We do not use third-party advertising trackers.

2. How we use information

  • To provide, maintain, and improve the DM DESK service, including AI-generated reply drafts and automation.
  • To communicate with Customers about their account, billing, and support requests.
  • To detect, prevent, and address fraud, abuse, or security issues.
  • To comply with legal obligations.

Message content may be processed by our AI provider, Anthropic, solely to generate the reply drafts and automation a Customer has configured. Anthropic processes this content under a commercial agreement and does not use it to train models available to other customers.

3. Who we share information with

We do not sell personal information. We share information only with the service providers below, each bound to use it solely to provide their service to us:

  • Meta Platforms, Inc. — to send and receive messages via the Instagram and Messenger APIs.
  • Anthropic — to generate AI reply drafts and automation.
  • Supabase — database hosting and authentication.
  • Vercel — application hosting.
  • Stripe — subscription billing and payment processing.
  • Resend — transactional email delivery.
  • Twilio — SMS alerts for conversation handoffs, where enabled.
  • Sentry — error monitoring and diagnostics.

We may also disclose information if required by law, or to protect the rights, property, or safety of DM DESK, our Customers, or others.

4. Data retention

We retain Customer account data for as long as the account is active and for a reasonable period afterward to comply with legal, billing, and support obligations. Platform Data received through Meta is retained only as long as needed to provide the messaging features described above, and is deleted on account closure or on a valid deletion request.

5. Security

Data is encrypted in transit. Each Customer's data is isolated at the database level so one business cannot access another's conversations or records. Access to production systems is limited to what is needed to operate the service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights and choices

Customers can access, correct, or delete their account information from the dashboard, or by contacting us. End Users who have messaged a business using DM DESK can request that we delete their message data by following our Data Deletion Instructions.

California residents have rights under the CCPA to know what personal information we hold, to request its deletion, and to opt out of its sale. We do not sell personal information, so there is nothing to opt out of. To exercise any of these rights, contact us at dmdeskai@gmail.com.

7. Children's privacy

DM DESK is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.

8. International users

DM DESK is operated from the United States and data is processed and stored in the United States. By using the service, you consent to this transfer and processing.

9. Changes to this policy

We may update this policy as the service changes. Material changes will be reflected by updating the date at the top of this page. Continued use of DM DESK after a change means you accept the updated policy.

10. Contact us

Questions about this policy or how your data is handled: email dmdeskai@gmail.com.

DM DESK is operated by DM Desk LLC, a California limited liability company.