This document is a working draft until it has been reviewed by our lawyers before launch. The binding version will be published here and dated.
Askem d.o.o. is the controller for the personal data described here. For the data your customers send to your ChaosDesk workspace, you are the controller and we are your processor; that is covered by the data processing agreement.
Website visitors
- Server logs: our web server keeps the IP address and request details in short-lived logs, for security.
- Visit counting (legitimate interest, no cookies): our own server counts page views, the referring domain, the campaign of the link and a device class. We store no IP address and no identifier: unique visitors are counted per day with a hash whose random key is replaced daily. Do Not Track and Global Privacy Control turn it off completely. When you sign up, the campaign or referring site of your visit is stored with your new workspace, so we can see which campaigns lead to sign-ups and paying customers.
- With your consent (only when we turn on Plausible Analytics, off by default) Plausible counts visits too (no cookies, no cross-site tracking, IP addresses are not stored) and the site remembers the campaign of your first visit for 90 days. See cookies and local storage.
Early access list
When you join the early access list we store your email address and, if you give it, your name and the campaign that brought you here, in our own self-hosted systems in the EU. You are only on the list after you confirm your address with the link we email you. We use it to send your invite and launch updates. Every email has a one-click unsubscribe, and you can ask us to delete your details at any time.
Roadmap votes
When you vote on the public roadmap we email you a link to confirm the vote. We keep only a keyed hash of your email address, so we can count one vote per person without storing the address itself. Votes that are not confirmed within 7 days are deleted.
Customers and their staff
To run your account we process the names, email addresses and sign-in details of the people in your workspace, billing details (handled by our payment provider), and usage information needed to bill, secure and improve the service.
Legal bases
Consent (optional third-party analytics, early access emails, roadmap votes), contract (running your account), and legitimate interest (security, fraud prevention, cookieless visit counting and campaign attribution, service improvement that does not override your rights).
Where data is stored
In the EU. Where a subprocessor is outside the EU, transfers rely on an adequacy decision or the EU Standard Contractual Clauses.
Your rights
You can ask for access, correction, deletion, restriction, portability, and you can object or withdraw consent at any time. Write to privacy@chaosdesk.io. You also have the right to complain to a data protection authority.
Contact
Askem d.o.o., privacy@chaosdesk.io. Our EU and UK representatives will be named here before launch.