Privacy Policy

JooDesk is the product and brand through which the website is presented. The person or entity legally responsible for operating the website is responsible for determining how and why personal information is processed, subject to applicable law.

You may use the support email for privacy-related questions and requests. Do not include passwords, authentication codes, payment credentials, or unnecessary sensitive information in your message.

The responsible operator should confirm and publish its legal identity and any legally required business, address, and grievance particulars before commercial launch. This policy does not invent or imply that those details have already been verified.

JooDesk aims to handle personal information transparently and responsibly, having regard to applicable Indian law, including, where relevant:

• The Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025, according to their respective commencement dates and applicable provisions.
• The Information Technology Act, 2000, and applicable rules or requirements that remain relevant to the processing concerned.
• Applicable consumer-protection and e-commerce requirements, where they apply to the service and its activities.
• Applicable cybersecurity, record-keeping, and lawful-request requirements.

The applicability of individual laws and provisions depends on the facts, the service being offered, and the provisions in force at the relevant time. Listing legislation here does not constitute a certification or declaration of complete legal compliance.

JooDesk should review this policy as its services and applicable legal requirements change.

The information collected depends on how you use the website and which features are enabled.

Subject to applicable law and the circumstances of collection, personal information may be processed to:

• Create and manage accounts.
• Authenticate users and protect account security.
• Process waitlist registrations and maintain registration order.
• Respond to questions and support requests.
• Send requested product updates and relevant service communications.
• Operate and maintain the website.
• Troubleshoot errors and improve reliability.
• Prevent spam, fraud, abuse, and unauthorized access.
• Maintain appropriate operational, security, and administrative records.
• Meet applicable legal obligations and respond to lawful requests.

Information must not be used for a materially unrelated purpose without an appropriate legal basis and any notice or consent required by applicable law.

As of the effective date of this policy, JooDesk is in pre-launch status. Public commercial subscription checkout is not represented as currently available.

If payment functionality is activated in the future, the payment flow and relevant disclosures should be reviewed and updated before live payments are accepted.

Where Razorpay or another payment service provider is used, payment processing may be subject to that provider's terms and privacy practices. Information shared depends on the payment flow and the provider's requirements.

Future subscriptions, recurring payments, cancellations, refunds, and payment-related records should be described in the relevant service terms and policies before commercial features become available.

The website may use cookies or similar technologies required for session management, security, and essential functionality.

These technologies may maintain application sessions (such as joodesk_session), support security features (such as XSRF-TOKEN for cross-site request forgery protection), and preserve temporary website state or preferences.

Essential session technologies may be necessary for sign-in, security, and core website functions. Blocking essential cookies may affect website functionality.

JooDesk does not intend to use third-party advertising cookies or cross-site behavioural advertising trackers on the pre-launch website.

If analytics, advertising, or optional tracking tools are introduced, this policy and any required notice or consent controls should be reviewed before activation.

JooDesk does not intend to sell personal information as a standalone commercial product.

Information may be processed or shared when reasonably necessary to operate the website, provide a requested service, protect users, or meet legal obligations. Depending on the features enabled, recipients may include:

• Supabase: authentication, database, or file-storage services configured for the website.
• Razorpay or another payment provider: if a payment feature is activated and that provider is used.
• Email or communication providers: to deliver messages, verification emails, support replies, or product updates.
• Technical service providers: for hosting, reliability, security, or troubleshooting.
• Authorities or legal advisers: where disclosure is required by applicable law or otherwise lawfully necessary.

Service providers should receive only information reasonably necessary for their function and should process it under applicable contractual and legal arrangements.

The actual providers, processing locations, data-protection terms, and international transfers depend on the configuration and contracts. This policy does not certify a provider's security certification or contractual status.

JooDesk should not share personal information with unrelated third parties for their independent marketing without an appropriate basis and any required notice or consent.

JooDesk aims to use reasonable technical and organisational safeguards appropriate to the information processed and the risks involved.

Depending on the implementation, safeguards may include secure transport, authentication controls, access restrictions, cross-site request forgery protection, input validation, abuse prevention, and security logging.

Actual safeguards depend on the deployed application, hosting environment, provider configuration, and access permissions. This policy does not guarantee that every possible security measure is enabled or that a security incident can never occur.

If a personal-data breach occurs, JooDesk will assess the incident and take appropriate action, including notifications to affected individuals or authorities where required by applicable law.

JooDesk aims to retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including account management, waitlist administration, support, security, dispute resolution, and applicable legal obligations.

Different categories of information may require different retention periods.

For example:

• Account information may be retained while an account is active and for an appropriate period afterward where necessary.
• Waitlist information may be retained while the waitlist is operating and until it is no longer needed for the stated purposes, subject to applicable obligations.
• Support enquiries may be retained for an appropriate period to respond, resolve issues, and maintain relevant records.
• Security and technical logs may be retained for a period appropriate to their purpose.
• Records that must be preserved by law may be retained for the legally required period.

When information is no longer needed, it should be deleted, anonymised, or otherwise handled in accordance with applicable law and retention requirements, subject to technical limitations and lawful retention obligations.

Depending on the feature and applicable law, you may be able to request access to, correction of, or deletion of personal information relating to you.

Available options may include:

• Updating account information through existing account settings.
• Changing or removing a profile avatar through available profile controls.
• Leaving the waitlist through an available exit mechanism or by contacting support.
• Managing optional product-update communications.
• Requesting information about personal data processed by JooDesk.
• Requesting correction or deletion of personal information, where applicable.

Some requests may require manual handling rather than a self-service interface.

Requests will be handled in accordance with applicable law, including relevant legal time limits where they apply. Certain information may need to be retained where required by law or necessary for legitimate security, dispute-resolution, or record-keeping purposes.

Statutory rights, grievance mechanisms, and nomination rights that apply will be handled in accordance with the relevant provisions as they come into force.

JooDesk is intended for business and professional use. The website is not designed to knowingly collect personal information from children in violation of applicable law.

If a feature may be used by children or otherwise processes children's personal data, the responsible operator must review applicable legal requirements and implement required safeguards before enabling it.

If you believe personal information has been submitted inappropriately, contact support@joodesk.com so the matter can be reviewed.

The JooDesk website may link to external websites or use third-party services. Those services may have their own privacy policies, terms, security practices, and data-handling arrangements.

JooDesk does not control the privacy practices of independent third-party websites. Review the relevant provider's privacy information before submitting personal information directly to that provider.

This Privacy Policy may be updated when the website, data-processing practices, service providers, or applicable legal requirements change.

When a material update is made, the last-updated date should be revised. Where required by applicable law, JooDesk will provide additional notice or obtain consent as appropriate.

The version displayed on the website is intended to describe the practices applicable to the stated period. Earlier versions may be retained where necessary for operational or legal record-keeping.