This policy explains what data Channel Desk processes, why, and the choices you have. It applies to the Channel Desk web application, the Channel Desk Meta app (App ID 1069551319265992) and this website. If you are a customer messaging a business that uses Channel Desk, that business is the controller of your conversation; we process it on the business's behalf.
El Domo Private Limited is a company registered in India, headquartered in Bengaluru, Karnataka. Contact: mohan@thedomeretreats.com.
| Category | Examples | Source |
|---|---|---|
| Account data | Staff name, email, role, sign-in events | Provided by the business when it invites staff |
| Connected channel data | WhatsApp Business Account ID, phone number ID, Instagram professional account ID and username, access tokens | Granted by the business through Meta's Embedded Signup / Instagram Login |
| Conversation data | Messages, comments, media, delivery status, customer display name and WhatsApp/Instagram ID | Delivered by Meta's webhooks for the connected accounts |
| Business content | Message templates, FAQ / knowledge-base entries, canned replies, scheduled posts | Entered by the business |
| Usage data | Server logs, error reports | Generated when the service is used |
Only to provide the inbox to the business that connected the accounts: showing and sending messages, assigning conversations to staff, applying the business's own automation rules, publishing the business's own posts, and displaying engagement metrics for its accounts. Where a business turns on the optional AI assistant, the current conversation and the business's own FAQ are sent to an AI provider (Anthropic or OpenAI) to draft a reply; those providers do not train models on this data under our agreements.
We do not sell Platform Data, use it for advertising, build profiles of end customers across businesses, or share it with anyone other than the sub-processors below.
Data obtained through Meta's APIs is used in line with the Meta Platform Terms and the WhatsApp Business Solution Terms. Access tokens are stored encrypted and used only for the business that granted them. When a business disconnects a channel, the token is revoked and deleted immediately.
Supabase (database, storage and functions — region Mumbai, India), Vercel (web hosting), Meta Platforms (WhatsApp Business Platform, Instagram API), Anthropic and OpenAI (optional AI drafting), Google Workspace (email).
Conversation data is kept for as long as the business keeps its account, so that staff can see history. A business can delete individual contacts and conversations at any time from the app, and can request full deletion of all its data — see Data deletion instructions. We complete deletion within 30 days. Backups roll off within a further 30 days.
Data is encrypted in transit (TLS) and at rest. Access is scoped per business through row-level security; staff can only see data of the business that invited them. Secrets and tokens are stored separately from application data and are never displayed in the app.
Businesses can access, correct, export and delete their data from the app or by emailing us. End customers should contact the business they messaged; we will assist that business with any request. Residents of India have the rights described in the Digital Personal Data Protection Act, 2023; we honour equivalent requests from anyone.
We will post changes on this page and update the effective date. Material changes are also emailed to business administrators.