Legal

Privacy notice

Effective 19 September 2026 · This notice describes the pre-release VeyaDesk website and Windows beta.

Privacy by restraint

We minimise what the service needs.

Website data

The website does not currently use advertising cookies, behavioural analytics, tracking pixels or account registration. The hosting provider may process standard request information such as IP address, user agent, requested page, time and security signals to deliver and protect the site.

Remote-access data

For temporary sessions, the relay processes a random session identifier, temporary display code, public cryptographic keys, hashed access tokens, approval state and encrypted message envelopes. For unattended access, it also temporarily processes a permanent device ID, signed public device descriptor, public password salt and work factor, opaque encrypted password proofs, failed-attempt state and online presence. It does not receive the plaintext password, password verifier, device private keys, screen images or input commands.

Active sessions and online device registrations are held in memory and disappear when revoked, expired or the relay restarts. Per-client IP information is held temporarily for rate limiting.

Data stored on your computer

If you enable unattended access, VeyaDesk stores the permanent device private keys, password-derived verifier and local lockout state under current-user Windows DPAPI protection. Disabling unattended access deletes that configuration and revokes the device ID.

Contact information

If you email us, we process your address, message and any information you choose to provide so we can respond, support the product and keep necessary business records. Do not send passwords, session tokens or unnecessary sensitive information.

Sharing and processors

Infrastructure providers may process limited technical data on our behalf to host the website, relay and email. We do not sell personal data. We may disclose information where required by law, to protect users or to investigate abuse.

Retention

Live relay state is short-lived as described above. Security logs, hosting logs and correspondence may be retained only as long as reasonably necessary for security, support, legal and operational purposes.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal data. Contact [email protected] to make a request.

Children

VeyaDesk is not directed to children and should not be used by a child without appropriate adult supervision.

Changes

We may update this notice as the product and infrastructure evolve. A revised effective date will appear at the top of this page.