1. Who we are
HarvestDesk provides a workspace for mission organisations. For data an organisation stores in its workspace, the organisation is the controller and HarvestDesk is its processor. For data about our own website visitors and customers, HarvestDesk is the controller.
2. What we collect
- Account details: name, email address, role and organisation.
- Workspace content your organisation chooses to store.
- Technical data: sign-in times, device and browser information, and security logs.
- Enquiries sent through our website forms.
3. How we use it
- To provide, secure and support the service.
- To bill organisations for their subscription.
- To send service and security messages, such as sign-in codes.
- We do not sell personal data or use it for advertising.
4. Sharing
We use carefully chosen providers for hosting, email delivery and payments, bound by data protection agreements. We share data with authorities only where the law requires it.
5. Security
Data is encrypted in transit and at rest. Each organisation's data is kept separate, and access is controlled by roles, two-step verification and audit logs.
6. Keeping data
Workspace data is kept while the subscription is active and for 30 days after closure. Billing records are kept for 7 years for legal reasons.
7. Your rights
You can ask to access, correct, delete or export your personal data, or object to its use. If your data is held by an organisation using HarvestDesk, contact that organisation first. You may complain to the UK Information Commissioner's Office.
8. Contact
Email hello@harvestdesk.org with any privacy question.