Legal
Privacy notice
Effective 19 September 2026 · This notice describes the pre-release VeyaDesk website and Windows beta.
Privacy by restraint
We minimise what the service needs.
Website data
The website does not currently use advertising cookies, behavioural analytics, tracking pixels or account registration. The hosting provider may process standard request information such as IP address, user agent, requested page, time and security signals to deliver and protect the site.
Remote-access data
For temporary sessions, the relay processes a random session identifier, temporary display code, public cryptographic keys, hashed access tokens, approval state and encrypted message envelopes. For unattended access, it also temporarily processes a permanent device ID, signed public device descriptor, public password salt and work factor, opaque encrypted password proofs, failed-attempt state and online presence. It does not receive the plaintext password, password verifier, device private keys, screen images or input commands.
Active sessions and online device registrations are held in memory and disappear when revoked, expired or the relay restarts. Per-client IP information is held temporarily for rate limiting.
Data stored on your computer
If you enable unattended access, VeyaDesk stores the permanent device private keys, password-derived verifier and local lockout state under current-user Windows DPAPI protection. Disabling unattended access deletes that configuration and revokes the device ID.
Contact information
If you email us, we process your address, message and any information you choose to provide so we can respond, support the product and keep necessary business records. Do not send passwords, session tokens or unnecessary sensitive information.
Sharing and processors
Infrastructure providers may process limited technical data on our behalf to host the website, relay and email. We do not sell personal data. We may disclose information where required by law, to protect users or to investigate abuse.
Retention
Live relay state is short-lived as described above. Security logs, hosting logs and correspondence may be retained only as long as reasonably necessary for security, support, legal and operational purposes.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal data. Contact [email protected] to make a request.
Children
VeyaDesk is not directed to children and should not be used by a child without appropriate adult supervision.
Changes
We may update this notice as the product and infrastructure evolve. A revised effective date will appear at the top of this page.