Last updated: July 31, 2026
This policy explains what information DeskFlow collects, how we use it, and the choices you have.
DeskFlow ("DeskFlow", "we", "us") is a customer support services business operated by Sahil Chandok, a sole proprietor based in New York, United States. We provide outsourced customer support to direct-to-consumer and SaaS brands.
For any privacy question or request, contact us at [email protected].
When you submit the form on our website, we collect the name, company, email address, and mobile phone number you provide. If you consent to SMS, we also record the date and time of that consent and the exact disclosure text shown to you at the time.
When providing support services, our agents handle customer enquiries on our clients' behalf. This may include the names, contact details, order information, and message contents of our clients' own customers. We process this information solely to deliver the support service, under our client's instructions. For that data our client is the controller and DeskFlow acts as a processor.
Our website is served through Cloudflare, which records standard technical information such as IP address, browser type, and pages requested, for security and reliability purposes.
We do not sell, rent, or share mobile phone numbers or SMS consent information with any third party for marketing purposes. Mobile numbers collected for SMS are used solely to deliver the messages you opted in to receive, and are shared only with our messaging provider (Twilio) for the sole purpose of transmitting those messages.
If you opt in to SMS, you will receive service and account messages relating to your DeskFlow account — typically around four messages in your first month, then occasionally thereafter. Message and data rates may apply. Message frequency varies.
Reply STOP to any message to opt out at any time. Reply HELP for assistance. Consent to receive SMS is not a condition of purchasing any goods or services.
We retain your consent record — the timestamp and the disclosure text you agreed to — for as long as required to demonstrate compliance with applicable law.
We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not sell personal information.
We share personal information only in these circumstances:
We do not sell, rent, or trade personal information, and we do not share it with third parties for their own marketing purposes.
We keep enquiry information for as long as needed to respond and for a reasonable period afterwards. Client service records are retained for the duration of the engagement and for a period following its end, to meet accounting and legal obligations. SMS consent records are retained for as long as required to demonstrate compliance. When information is no longer needed, we delete it or render it anonymous.
We apply reasonable administrative and technical safeguards appropriate to the size of our business, including access controls limiting client data to the agents assigned to that account, encrypted transport for our website and messaging, and credentials that are not shared or stored in client-accessible systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
To exercise any of these, email [email protected]. We will respond within the timeframe required by applicable law. Residents of certain states, including California, may have additional rights; we apply the rights above to all users regardless of location.
If you are a customer of one of our clients and wish to exercise rights over data we process on their behalf, please contact that business directly. We will assist them in responding.
Our services are directed to businesses and are not intended for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
We operate in the United States, and information we collect is processed there. If you access our services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection law may differ from that of your country.
We may update this policy from time to time. When we do, we will revise the "last updated" date above. Material changes affecting how we use your information will be communicated to affected clients directly.
DeskFlow — operated by Sahil Chandok
New York, United States
[email protected]