Last updated: 19 May 2026
DexterDesk ("we," "our," or "us") is operated by Chadwick Dobson as a sole proprietorship in Michigan, United States. This Privacy Policy describes how we collect, use, store, and disclose information when you use DexterDesk (the "Service").
When you sign up, we collect your email address and a hashed password (we never see your password in plaintext — Supabase Auth handles password hashing). Your subscription status is stored alongside your account.
When you connect your Google account via OAuth, we receive limited access to your Gmail and Google Calendar data, as described below. We only receive this data after you explicitly authorize the connection through Google's OAuth consent screen.
The conversations you have with DEXTER (your assistant) are stored in our database so your assistant can remember context across sessions. You can delete this data at any time from your account settings.
Payments are processed by Stripe. We do not store your full credit card number — Stripe stores it on our behalf. We retain a record of your subscription status and billing history.
DexterDesk's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
OAuth refresh tokens are encrypted with Fernet symmetric encryption before being stored in our database. Gmail messages and Calendar events are not persisted by DexterDesk — they are fetched in real time when DEXTER needs them. The only Google-derived data we store long-term is what you explicitly ask DEXTER to remember (e.g., "remember that my finance midterm is March 15") — which we store as plain text in your memory files.
You can revoke DexterDesk's access to your Google account at any time by visiting your Google Account permissions page and removing DexterDesk, or by disconnecting your accounts from within DexterDesk's settings page.
DexterDesk uses the following service providers, each governed by their own privacy policies:
You can request to delete your account and all associated data at any time by emailing cdchaddobson@gmail.com. Account deletion removes your auth record, conversation history, memory files, OAuth tokens, and subscription record. Stripe retains transaction records as required by tax and financial reporting law.
Conversation history and memory files are retained while your account is active. If you cancel your subscription, your data remains accessible during the grace period (until your current billing cycle ends), after which the account is deactivated. Permanent deletion happens on request or 90 days after account closure.
DexterDesk is not intended for users under 18. We do not knowingly collect data from anyone under 18.
We may update this Privacy Policy from time to time. We will notify users of material changes via email and by updating the "Last updated" date above.
Questions about this Privacy Policy? Email cdchaddobson@gmail.com.