Privacy Policy

Effective Date: July 5, 2026

Cordesk (“we”, “our”, or “us”) provides a unified support solution that allows users to manage support tickets via Discord, live chat, and email. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.

1. Information We Collect

We collect the following types of information:

a. Account Information

When you sign in with Discord, we collect your user ID, username, avatar, and a list of the servers (guilds) you belong to. We also store access credentials required to provide and maintain your session securely.

b. Communication Data

We collect the content and metadata of messages sent through support tickets, live chats, and email threads handled via Cordesk. This includes timestamps, sender identity (e.g., user or staff), and system-generated information.

c. Email & Domain Settings

If you configure Cordesk to send or receive emails on your domain, we collect domain details and related email authentication settings to ensure messages are delivered securely and reliably.

d. Usage and Metadata

We collect anonymized or aggregated data about how you interact with Cordesk, such as session logs and technical metadata, to improve our services and ensure platform security.

e. Payment Information

Cordesk uses Polar.sh to manage payments and billing. We do not store or process payment information directly. Please refer to Polar’s Privacy Policy for details on their data practices.

2. How We Use Your Information

We use your information to:

  • Provide and operate the Cordesk platform
  • Facilitate ticketing, chat, and email support
  • Manage your account and permissions
  • Analyze usage trends and improve our services
  • Communicate with you about updates or issues
  • Comply with legal and regulatory obligations

3. Sharing and Disclosure

We do not sell your personal information. We may share information only in these cases:

  • With trusted service providers who help us operate (e.g., Polar.sh for billing)
  • With AI model providers, only for servers where an administrator has enabled the optional AI assistant. In that case, the content of messages in tickets handled by that server's AI-enabled panels is sent to an AI provider to generate support responses — either our managed provider, DeepSeek (privacy policy), or a third-party endpoint the server administrator has configured themselves ("bring your own key"). Ticket content is shared solely to generate these responses and is never sent to any AI provider for servers that have not enabled this feature.
  • When required by law, court order, or government request
  • If necessary to protect the rights or safety of our users or infrastructure
  • In the event of a business transfer (e.g., merger or acquisition)

4. Data Retention

We retain your information only for as long as it is needed to provide our services:

  • Server data. Support tickets, message history, ticket panels, forms, flows, canned responses, ban lists, and AI configuration (including encrypted API keys) belonging to a Discord server are retained in order to provide the service to that server, including access to past tickets and transcripts.
  • Account data. Your Discord account information and session credentials are retained while your account remains active.
  • Deletion on request. Server administrators and end users may request deletion of their data at any time by contacting [email protected].
  • We may retain limited records where required to comply with legal obligations, resolve disputes, or enforce our agreements.

5. Security

We implement industry-standard measures to protect your personal data from unauthorized access, alteration, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have rights such as:

  • Accessing or updating your information
  • Requesting data deletion
  • Objecting to certain uses of your data
  • Withdrawing previously given consent

To exercise your rights, please contact us at [email protected].

7. Children's Privacy

Cordesk is not intended for children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

8. International Data Transfers

Your information may be processed in countries outside of your own, where data protection laws may differ. By using Cordesk, you consent to this transfer and processing.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We’ll notify you of significant changes by posting an update on our site or contacting you directly.

10. Contact Us

If you have any questions or concerns, you can contact us at:

Cordesk

Email: [email protected]

Website: https://cordesk.cc