Privacy Policy

1. Who we are

OhMyDesk is coworking management software, available at ohmydesk.app. For data we process about our own account holders and website visitors, we are the data controller. You can reach us about privacy at [email protected].

2. Who this policy is for

This policy covers our website and the account you hold with us as a space operator. When a coworking space uses OhMyDesk to manage its own members, the space is the controller of its members’ data and OhMyDesk acts as its processor — handling that data only on the space’s instructions. If you’re a member of a space, contact that space about your data.

3. What we collect

• Account data — your name, email, organization details, and role.
• Operational data you enter — members, bookings, plans, invoices and similar records you create to run your space.
• Usage data — basic, privacy-friendly analytics about how the product and site are used.
• Communications — messages you send us for support.
• Payment data — handled by our payment processor; we never receive or store full card numbers.

4. Why we use it & our legal bases

• To provide and operate the service — performance of our contract with you.
• To secure, maintain, and improve the service — our legitimate interests.
• To send service and account emails — performance of our contract.
• To meet legal and accounting obligations — legal obligation.

5. Cookies & analytics

We use privacy-friendly, self-hosted analytics to understand aggregate usage. It does not build advertising profiles or track you across other websites. We use only the cookies needed to keep you signed in and to run the service. Our site loads Google Fonts to render type, which may expose your IP address to Google for that purpose.

6. Subprocessors

We rely on a small set of trusted providers to deliver the service:

• Supabase — database, authentication, and file storage.
• Cloudflare — website and application hosting / content delivery.
• Resend — sending transactional and notification emails.
• Stripe — payment processing, where a space enables payments.
• Telegram — optional operator notifications, if you connect it.
• Google Fonts — web-font delivery.

7. How long we keep it

We keep personal data for as long as your account is active and as needed to provide the service, then delete or anonymize it within a reasonable period — except where we must retain records longer to meet legal or accounting obligations.

8. Your rights

Subject to applicable law, you can request access to your personal data, correction, erasure, restriction or objection to processing, and portability. To exercise these rights, email [email protected]. You also have the right to lodge a complaint with your local data protection authority.

9. International transfers

Some of our providers may process data outside your country. Where that happens, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) to protect your data.

10. Security

We use technical and organizational measures — encryption in transit, access controls, and row-level data isolation between organizations — to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information.

11. Children

OhMyDesk is a business tool and is not directed at children. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will take reasonable steps to notify you, and we’ll update the “last updated” date above.

13. Contact

Questions about your privacy? Email [email protected].