Privacy Policy
Last updated: 2026-10-16
Who we are
ReactDesk.io processes personal data collected through ReactDesk and this website in line with the EU General Data Protection Regulation (GDPR). This policy explains in plain language what we collect and why.
What we collect
Account and contact details you provide (name, email, company name); the data your business stores in the system (clients, repairs, inventory, sales); and technical data for security — IP address and browser information.
Live chat
When you write in our support chat we store the message text, your name and email (if you provide them or are signed in), the page address you wrote from, browser information and IP address. We use this data only to answer your question and improve support. The chat runs on our own server — conversations are not shared with third parties.
How we use data
To provide and improve the service, communicate with you (for example repair-status or billing notifications), ensure security and meet legal obligations. We do not sell your personal data.
Payments
Card payments are processed by EveryPay (Swedbank), a licensed payment institution. We never see or store your card details — we keep only the payment status and amount.
Your rights
You have the right to access, correct, delete and export your data, and to object to or restrict processing. Write to us — we will help you do it.
Retention & security
We keep data only as long as needed to provide the service or as the law requires, and protect it with encryption, access controls and regular backups.
Who controls the data in your workspace
The records your business keeps about its own clients belong to your business. Under GDPR you are the controller and ReactDesk is the processor: we hold and protect that data, and we act on your instructions, never on our own account. We do not sell it, mine it or use it to train anything. If one of your clients writes to us asking to be erased, we point them to you, because it is your record to change.
Erasing a person, and what the law makes us keep
You can erase a client at any time. Their name, phone, email and address are removed from the record and from the repairs and orders attached to it. What stays is the transaction itself, with nobody attached to it: the repair, the order, the receipt, the invoice. That is deliberate. Accounting law requires the source document to survive — in Latvia at least 5 years, and certain records longer; your accountant will tell you which apply to your business. GDPR allows exactly this: the right to erasure does not override a legal obligation to keep records (Article 17(3)(b)).
Deleting, and changing your mind
Anything you delete in the app goes to the recycle bin for 30 days before it is gone, so a wrong click is recoverable. Closing a workspace works the same way: it is scheduled, not instant, and you have 30 days to cancel. After that the workspace and its data are deleted, apart from the documents we must keep by law — the invoices we issued you and the payment records behind them.