Last updated 27 October 2026. DealsDesk is operated by TokenWorx (Adam Azad), Texas, USA.
The short version. DealsDesk runs as your own instance with your own database, hosted by us. It reads public posts you point it at, and it sends the text of those posts to Anthropic — under our account, not an API key of yours — to write a draft. It does not read your email. It does not post anything anywhere. It has no advertising, no trackers and no analytics, and nothing is sold or shared for marketing.
| What | Why | Where it lives |
|---|---|---|
| Your email address | Your account, and to email you about the service | Your instance; the waitlist list if you signed up on this site |
| Your profile — what you do, what you've built, what you charge | It is what drafts are checked against, so the tool cannot claim experience you do not have | Your instance |
| Leads: public posts, the author's public username, the post URL | This is the product | Your instance |
| Drafts you generate, and whether you sent them | So you can see what is outstanding | Your instance |
| Model usage: tokens, cost, latency, which prompt | To show you your usage and to enforce the beta's spending limits | Your instance |
gmail.send scope and nothing else.
It can send a message as you. It cannot list, read, or search your
mail — not your inbox, not your sent items, not anything. This is a
deliberate limit, and it is why dealsdesk cannot tell you when someone
replies; you mark replies yourself.Only where the product cannot function otherwise:
That is the complete list. There are no advertising networks, no data brokers, and nothing is sold.
This part is usually left out of policies like this one, so: when dealsdesk collects a public post, it stores that post's text, its URL, and the author's public username. Those people did not sign up for anything.
We will take reasonable steps to verify the request without collecting more personal information than necessary — we will not ask for identity documents to remove a public forum username — find the records in systems we control, and respond within the time applicable law requires.
Where deletion is required we will delete or de-identify those records, subject to lawful exceptions, and take appropriate steps with processors and other recipients where required.
We may keep the minimum information needed to record and honour the objection, so the scanner does not simply collect the same post again on its next run. That record holds the post's address and nothing of its content.
We cannot guarantee deletion of independent copies held by anyone outside our control, including copies held by customers who run their own installation. Where we cannot reach a system ourselves we will tell you so plainly rather than imply otherwise.
Your instance is a single database file on a server we operate for you. Backups are kept for 14 days and then deleted. If you close your account, the instance and its backups are deleted within 30 days; ask and it will be done sooner.
You can ask for a copy of your data, a correction, or deletion, at privacy@dealsdesk.app. Because an instance is yours, an export is a copy of your database and deletion is the removal of that file. If you are in the UK, EU or California you have statutory rights to these; they are honoured for everyone regardless.
Not directed at anyone under 18 and not knowingly used by them.
If this changes materially, you get an email before it takes effect. The date at the top always reflects the current version.