Privacy

Updated 8 September 2026

webfaCe Desk is built so that your business data stays on a server of its own, in Canada — never pooled with another customer's, and never used to train anything. This page says exactly what we hold, what your Desk holds, who can reach it, and what leaves it.

Who we are

webfaCeMEdia, 57 Finch Ave West, Toronto, ON M2N 0K9. Questions about privacy: tommy@webfacemedia.com.

What we hold about you

• Order details: your name, business name, email, the plan you chose and your Desk's address. Kept while you are a customer and for seven years after for tax records.
• Payments are handled by Stripe. We never see or store card numbers.
• Operations: a heartbeat from your Desk (it is up, its version, which accounts are connected, how much model usage it has had) so we can bill correctly and notice when something is wrong. No message content is in it.
• Your first password: the one we generate is shown once on your welcome page and held by us until your Desk is closed, so we can give it to you again if the email never arrived. Change it on your Desk and the copy we hold opens nothing.
• Storefront: standard server logs (IP address, page, time), kept 30 days. No advertising trackers.

What your Desk holds — and where

• Everything your Desk works with — conversations, files you upload, drafts, connected-account tokens, its browser profile — lives on your Desk's own server in Toronto (DigitalOcean's TOR1 region), on a disk that is encrypted where it sits. It is reached only over an encrypted connection, and only by someone your Desk has signed in.
• Nightly backups are copies of that same encrypted disk, kept in the same region for 30 days and then deleted. A final one is taken when a Desk closes, kept 30 days so you can come back, and deleted within 90. Backups are held in our DigitalOcean account.
• What we can reach. We run your Desk, so we can reach it. Our operator console reads how it is set up — your business details, brand, price list, the files in your company folder, and the notes your Desk keeps — so that we can configure it and help when something is wrong. That console does not read your conversations or your mail. Signing in to the Desk itself we do only when you ask us to, and we say so first.

Google

• Sign in with Google asks only for your email address, to match it against the owners of your Desk. Nothing else is read and nothing is stored beyond your session.
• Gmail, Calendar, Drive and Contacts are connected through a Google app that belongs to your business, which Desk helps you create. The access token is stored on your Desk only, never on our servers, and you can revoke it from the Connections page or from your Google account at any time.
• Use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements: Google data is used only to do what you ask your Desk to do, is never sold, never used for advertising, and never used to train models.

Model providers

To answer you, your Desk sends the relevant text of a conversation (and the parts of documents or emails it needs) to an AI company, through OpenRouter, which routes the request. Our account there is set to zero-data-retention: a provider that would keep what you send, or train on it, is refused the request before it is sent — which deliberately puts a large part of the AI catalogue out of bounds for us. We do not use your data to train anything, and we do not sell it. If we set your Desk up with your own model key instead, that account's privacy settings apply, and we will show you the two switches to set.

Cookies and third parties

One sign-in cookie on your Desk; none on this site. Pages load their typefaces from Google Fonts and count visits with our own Insights (no cookies, no advertising). Checkout is handled on Stripe's pages under Stripe's policy.

Your rights

You can download everything on your Desk — files and conversations — from its Files page, and you can ask us to delete your Desk and our records of you at any time — we complete deletion within 30 days, except records the law requires us to keep. You may also complain to the Office of the Privacy Commissioner of Canada.

Changes

When this page changes, the date at the top changes; material changes are emailed to customers.