RenewalDesk Icon
RenewalDesk
Back to RenewalDesk
Data Protection & Privacy

Privacy Policy

Effective Date: October 2026•Last Updated: October 2026•App URL: https://renewaldesk-dun.vercel.app

RenewalDesk (“we”, “our”, or “us”) provides a software-as-a-service customer retention platform designed for service and equipment maintenance businesses. This Privacy Policy outlines how your personal, business, and customer information is collected, processed, stored, and protected when you access RenewalDesk.

1. Information We Collect

RenewalDesk collects only the information necessary to provide account access, calculate service recurrence schedules, and generate customer WhatsApp follow-up reminders:

A. Account & Authentication Information

When you create an account using email and password, we collect your email address and securely store an encrypted hash of your password via Supabase Authentication. When you authenticate using Google Sign-In, we collect your name, email address, and profile picture provided by Google.

B. Business Profile Data

During workspace onboarding, you provide your business name, industry/business type (e.g., Air Conditioning, RO Water Purifier, Home Appliances), contact telephone number, business address, preferred currency (e.g., Indian Rupee ₹), and timezone.

C. Customer, Equipment & Service Records

You input or import records regarding your service clients. This includes customer names, contact phone numbers, service addresses, and optional notes; equipment details such as appliance type, brand, model, and installation date; and service records indicating service types, recurrence intervals (e.g., 30, 90, 180, or 365 days), last completed service dates, and next calculated due dates.

D. Technical & Operational Telemetry

We collect aggregate performance and reliability metrics using Vercel Speed Insights and Vercel Web Analytics. These tools measure page load speeds and traffic patterns without collecting personal identifiable information (PII) or using third-party tracking cookies across websites.

2. Google Sign-In & Explicit Scope Limitations

RenewalDesk offers optional Google Sign-In powered by Supabase Auth for quick and secure account authentication. We adhere strictly to the principle of least privilege:

What RenewalDesk Accesses
  • Your basic Google identity profile: full name and email address.
  • Your Google profile avatar URL (used solely to personalize your workspace header).
  • Verification of your authenticated Google account session.
What RenewalDesk Never Accesses
  • No Gmail access: We never read, send, or scan your emails.
  • No Google Drive access: We never view, upload, or manage files.
  • No Google Contacts access: We never read or sync your contact book.
  • No Google Calendar or Docs access: We do not request any Google Workspace tools.

RenewalDesk requests only standard open authentication scopes (openid, profile, email). We will never request or retain elevated Google Workspace permissions.

3. How We Use Collected Information

Your information is used strictly to operate the RenewalDesk application on your behalf:

  • Service Recurrence Calculations: Computing upcoming due dates from maintenance cadences (e.g., quarterly AC filter cleanings, annual RO filter replacements).
  • Follow-Up Queue Generation: Categorizing upcoming services into Overdue, Due Today, Due This Week, and Due This Month.
  • Pre-Formatted WhatsApp Outreach: Populating your customized reminder message templates with customer names, equipment models, and due dates.
  • Workspace Security & Access Control: Authenticating users and verifying business memberships.
  • Service Communications: Delivering critical system messages such as password reset links and account verification notices.
Zero Data Monetization: RenewalDesk does not sell, rent, monetize, or trade your business data or customer phone numbers to third-party data brokers, marketing agencies, or advertisers.

4. Data Storage & Multi-Tenant Security Safeguards

We implement security safeguards designed to keep your business records private and isolated:

PostgreSQL Row Level Security (RLS): Our database enforces strict RLS policies on all business tables (customers, assets, service schedules, reminders, and templates). A business workspace can only access and modify records belonging to its verified business_id.
Encryption in Transit & at Rest: All application traffic is encrypted in transit using industry-standard TLS / HTTPS. Stored records are managed on cloud database infrastructure with AES-256 encryption at rest.
Client-Side WhatsApp Architecture: RenewalDesk does not connect to the WhatsApp Cloud API or store WhatsApp account credentials. Reminders are generated as standard client-side wa.me deep links that open your personal or business WhatsApp app only when you click the button.
Open-Redirect Protection: Authentication and callback handlers strictly validate redirection targets against safe internal paths, preventing phishing redirects.

5. Third-Party Service Providers (Sub-Processors)

RenewalDesk utilizes vetted infrastructure providers to operate the cloud service:

Supabase Inc.

Provides our managed PostgreSQL database, authentication system, user session tokens, and Row Level Security infrastructure.

Vercel Inc.

Hosts our web application edge deployment, executes serverless functions, and provides privacy-friendly Web Analytics and Speed Insights.

WhatsApp / Meta

Recipient platform when you click to send pre-formatted WhatsApp messages from your device. RenewalDesk does not share database records directly with Meta.

6. Data Retention & Account Deletion

We retain your business workspace data, customer records, and service schedules for as long as your account remains active, or until you request deletion.

How to Request Deletion:

You may request complete deletion of your account and all associated customer, equipment, and service records at any time by emailing us at shahulhmd.connect@gmail.com. Upon verification of your account ownership, we will permanently purge your workspace records from our active database.

7. Contact Us

If you have questions regarding this Privacy Policy, your data rights, or account deletion, please contact us:

Product: RenewalDesk Customer Retention SaaS
Operating Location: Kochi, Kerala, India
Support & Privacy Inquiries: shahulhmd.connect@gmail.com