DRAFT, pending legal review. This document is a working template and has not been finalized by counsel.

Privacy Policy

Last updated: July 10, 2026

This Privacy Policy explains how RyuuGroup (“RyuuGroup”, “we”, “us”) collects, uses, and shares personal data through ChannelDesk (channeldesk.app), a multi-tenant commerce operations dashboard. It applies to workspace owners, admins, and viewers who use ChannelDesk (“tenant users”), and it also describes how we handle data belonging to a tenant’s own customers when that data flows into the product through a connected sales channel or help desk.

1. Who we are

ChannelDesk is an independent product owned and operated by RyuuGroup. ChannelDesk is not owned by any of the businesses that use it as customers, including BuzzTV, which is a ChannelDesk tenant like any other. If you have questions about this policy or about your data, contact us at privacy@channeldesk.app.

2. Our dual role: controller and processor

ChannelDesk holds two different roles depending on whose data is involved, and it is important to understand the difference.

Data controller. For account and workspace data belonging to tenant users (for example, the name, email address, and login credentials of the people who sign in to ChannelDesk), we act as the data controller. We decide why and how that data is processed, in line with this policy.
Data processor. For data that a tenant connects into ChannelDesk from its own sales channels and support systems (for example, a tenant’s order records, customer names, emails, phone numbers, and help desk ticket contents), we act only as a data processor on that tenant’s behalf. The tenant is the data controller for its own customers’ information, and processes that data under its own privacy notices and legal bases. We process it only to provide the ChannelDesk service to that tenant, under the tenant’s instructions.

If you are a customer of one of our tenants (for example, a shopper who placed an order with a business that uses ChannelDesk) and you have questions about how your data is handled, please contact that business directly. We will support them in responding to your request as required by applicable law.

3. What personal data we collect

Tenant user data (we are the controller). When you create a ChannelDesk account or accept a workspace invite, we collect your name, email address, password (stored as a salted hash), workspace role, and basic usage and device information (such as IP address and log data) needed to operate and secure the service.

Processed customer data (we are the processor). When a tenant connects a sales channel or help desk integration, ChannelDesk may receive and cache order-level data such as customer names, email addresses, phone numbers, shipping details, order line items, and help desk ticket contents, solely to display and summarize that information back to the tenant.

4. How we use data and our lawful bases

To create and operate tenant user accounts and workspaces (contract performance).
To pull, cache, and display connected channel and help desk data inside the dashboard, and to generate AI-assisted summaries and drafts on the tenant’s behalf (contract performance, on the tenant’s instructions).
To process subscription billing (contract performance, legitimate interest).
To secure the service, prevent abuse, and maintain audit and rate-limiting records (legitimate interest).
To communicate service updates, security notices, and, where permitted, product updates (legitimate interest, consent where required).
To comply with legal obligations.

5. Sub-processors

We use a small number of trusted sub-processors to run ChannelDesk. A full list with purpose, location, and data shared is maintained on our Sub-processors page. In brief, we currently use Anthropic (AI-assisted drafting), Stripe (billing), Zoho (help desk, only where a tenant has authorized the connection), Resend (transactional email), and Contabo (hosting infrastructure).

6. International data transfers

Several of our sub-processors, including Anthropic, Stripe, and Resend, are based in the United States. Where we transfer personal data originating in the UK, EEA, or other regions with data transfer restrictions to these providers, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and, where applicable, the EU-U.S. Data Privacy Framework (DPF). Our hosting infrastructure is provided by Contabo; the specific server region is to be confirmed and will be updated here once finalized.

7. Data retention

Tenant user account data is retained for as long as the account remains active, and for a limited period afterward to comply with legal, tax, and dispute-resolution obligations. Cached data pulled from a tenant’s connected sales channels and help desk (orders, customer contact details, ticket contents) is retained for up to 180 days on a rolling basis, in line with our operational cache retention window, after which older records are automatically purged. A tenant may request earlier deletion at any time.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to restrict or object to certain processing. Tenant users can exercise most of these rights directly from Settings > Privacy and data inside the ChannelDesk app. You can also reach us at privacy@channeldesk.app for any request, including requests relating to data we process on a tenant’s behalf, which we will route to the relevant tenant where required.

9. California privacy rights (CCPA/CPRA)

We do not sell or share your personal information, as those terms are defined under the CCPA/CPRA. California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to be free from discrimination for exercising these rights. Requests can be sent to privacy@channeldesk.app.

10. Security

We use industry-standard safeguards to protect personal data, including encrypted connections (TLS) in transit, hashed password storage, role-based access control within workspaces, and rate limiting on authentication endpoints. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to tenant users through the app or by email before they take effect.

12. Contact us

RyuuGroup, operator of ChannelDesk. For any privacy question or request, email privacy@channeldesk.app.