Privacy Policy

1. Who operates MergDesk

MergDesk is an early-stage communications management service operated by an independent developer. Contact: support@mergdesk.com.

2. Information we process

Depending on which features you use, we may process:

• Account details such as email address, name, authentication identifiers, and account settings.
• Connected Instagram professional account identifiers, usernames, access credentials/tokens, and connection metadata.
• Messages received through connected channels, message identifiers, sender identifiers, timestamps, conversation records, and replies sent through MergDesk.
• Technical information required to operate and secure the website, including request and error logs that may contain IP addresses and device/browser information.
• Messages you send us for support or privacy requests.

MergDesk is initially being developed around Instagram messaging. Additional integrations may be added in the future, in which case this notice will be updated before processing new categories of data.

3. Why we process this information

We use this information to create and authenticate accounts, connect authorized communications channels, display and organize conversations, send replies requested by account users, maintain security, resolve technical issues, and answer support or privacy requests.

For account and service functions, the relevant legal basis may be performance of a contract or steps taken before entering one. For proportionate security and troubleshooting, we may rely on legitimate interests. Where required, we will seek consent; where legally mandated, processing may be necessary to meet legal obligations.

4. Connected Instagram accounts and messages

When an authorized user connects a professional Instagram account, MergDesk uses Meta's interfaces to receive permitted message events and, when requested by that user, submit replies. We store conversation and message information to make the inbox function. Instagram data is not sold or used to serve third-party advertisements by MergDesk.

People who message a business using Instagram may have their message contents and relevant account identifiers processed in that business's MergDesk workspace. The connected business may determine how it uses these communications and may have its own privacy responsibilities.

5. Service providers and transfers

We currently use Supabase for authentication and database services, Vercel for website/application hosting, Resend for service-related email, and Meta for Instagram integration. These providers may process information as needed to deliver their services, subject to their own applicable terms and privacy information.

Information may be processed outside your country, including outside the UK or European Economic Area, depending on provider configurations.

6. Security

We use technical and organizational measures intended to protect information, including authenticated access to workspaces, restricted server-side database access, and encryption of stored Instagram access tokens. No online service can guarantee absolute security.

7. Retention and deletion

We retain account and conversation information while needed to provide the service, unless deletion is requested or a longer period is required by law. We aim to remove information that is no longer necessary. Some limited information may persist in backups for a defined period.

To request deletion, email support@mergdesk.com or see our Data Deletion page.

8. Your choices and rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to certain processing, or receive a copy of your personal information. Contact support@mergdesk.com with your request. We may need to verify your identity before acting.

Where applicable, you may also contact a data-protection regulator, including the French CNIL or the UK ICO.

9. Cookies and authentication

MergDesk uses essential authentication/session cookies for signed-in users.

10. Updates and contact

We may update this policy when our service or data practices change. The date at the top indicates the latest revision. For privacy questions, contact support@mergdesk.com.