Skip to content

Privacy

Two roles

Customer content is what people say to the agents, meeting audio and transcripts, and task inputs and outputs. We process it for the customer on its instructions, as a processor. The customer's own privacy notice to its staff and guests applies, and requests about this data go to the customer first.

Account and billing data is sign-in identity, contact details, subscription and invoices. We decide why and how we use it, as a controller.

How long we keep data

A customer can change these periods per data class in its admin console. A nightly job deletes expired data.

Deletion and your rights

You can ask for access, correction, deletion, restriction, a copy of your data, or object to its use, and you can complain to your data protection regulator.

For account and billing data, write to security@desap.net. For customer content, ask your employer or the organisation that invited you; we help them answer within the legal time limit.

A tenant administrator can request an export or a deletion in the console. When a tenant is deleted, its data, agent storage, model access and sign-in organisation are removed.

Security

Each tenant is isolated in the database and has a separate agent environment. Every action passes a permission check, the audit log is tamper-evident, and data is encrypted in transit and in backups.

AI use

People talk to AI agents named Bill (AI) and Ben (AI). The agent says it is an AI assistant before its first answer in a Teams conversation and when it joins a meeting. Answers can be wrong, so check important facts.

Contact

Privacy questions: security@desap.net.