Privacy notice

Who we are

ImproveDesk (“we”) provides a continual-improvement register and review platform. We are the data controller for the personal data described here. Our data is hosted in the United Kingdom (London, eu-west-2).

What we collect and why

• Waitlist email address — to contact you about the beta, on the lawful basis of your consent. You confirm your email via a double opt-in link and can withdraw at any time.
• Account and workspace data (from launch) — to provide the service, on the lawful basis of contract.
• Security and audit logs — to keep the service safe and provide evidence integrity, on the lawful basis of legitimate interest.

We do not use non-essential cookies. Our bot-protection (Cloudflare Turnstile) is configured in cookie-free mode.

Subprocessors

We use vetted providers under data processing agreements: Supabase (database/auth, UK region), Vercel (hosting), Resend (email), Stripe (billing, from launch) and Cloudflare (bot protection). A current list is maintained in our vendor register.

Retention

Waitlist entries are kept until launch or until you ask us to remove them. Dormant free workspaces are deleted after 12 months of inactivity, with 30-day and 7-day notices beforehand.

Your rights

You have the right to access, correct, delete or export your personal data, and to withdraw consent. To exercise any right, email privacy@improve-desk.com. We respond to requests within 30 days. You may also complain to the UK Information Commissioner’s Office (ICO).