Privacy
Your information should have a reason to be here.
DeskThings is designed around data minimisation: collect personal information for defined purposes, limit who can access it and retain it only for appropriate periods.
Payments
DeskThings must not store raw card numbers, CVV/CVC values, banking credentials or equivalent sensitive payment credentials.
Accounts and orders
Customer and order information should only be accessible to the customer and appropriately authorised administrative roles.
Optional analytics and marketing
Optional tracking and marketing should respect applicable consent and customer communication preferences.
Exports and deletion
Account interfaces are designed to support applicable personal-data export and deletion requests while preserving records that must legally or operationally remain.