← Back to home

Privacy Policy

Last updated: 8 April 2026

1. Who we are

Deskless Ltd (“Deskless”, “we”, “us”) is a company registered in England and Wales. We are registered with the Information Commissioner's Office (ICO) as a data controller.

Contact: [email protected]

2. What data we collect

We may collect the following personal data:

  • Contact information: name, email address, phone number, business name
  • WhatsApp message data: messages processed by our AI agents on your behalf
  • Business data: calendar entries, invoices, and CRM records accessed during service delivery
  • Website usage data: pages visited, browser type, IP address (anonymised)
  • Communication records: emails and calls with our team

3. How we use your data

We use your data to:

  • Provide and manage our AI agent services
  • Process WhatsApp conversations on your behalf
  • Improve and train our AI systems (using anonymised data only)
  • Communicate with you about your account and our services
  • Comply with legal obligations

4. Legal basis for processing

We process your data on the following legal bases under UK GDPR:

  • Contract: to deliver the services you've engaged us for
  • Legitimate interest: to improve our services and communicate relevant updates
  • Consent: for marketing communications (which you can withdraw at any time)
  • Legal obligation: to comply with applicable laws

5. Data storage and security

All data is hosted exclusively on EU servers (Hetzner, Germany) with:

  • Full-disk encryption at rest (AES-256)
  • TLS 1.3 encryption in transit
  • Regular security audits and penetration testing
  • Access controls limited to authorised personnel

6. Data sharing

We do not sell your data. We may share data with:

  • AI providers: Anthropic (Claude) for processing conversations — subject to their data processing agreements
  • Infrastructure providers: Hetzner (hosting), Vercel (website)
  • Professional advisors: accountants, legal counsel where required

7. Data retention

We retain your data for the duration of our service agreement plus 12 months. WhatsApp message data is retained for 90 days unless you request otherwise. You can request deletion at any time.

8. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, contact us at [email protected].

9. Cookies

Our website uses essential cookies only. We do not use tracking cookies or third-party advertising cookies. Analytics data is collected anonymously.

10. Complaints

If you're not happy with how we handle your data, you can contact the ICO at ico.org.uk or call 0303 123 1113.