DEXTERDESK Back to site

Privacy Policy

Last updated: 29 May 2026

DexterDesk ("we," "our," or "us") is operated by Chadwick Dobson as a sole proprietorship in Michigan, United States. This Privacy Policy describes how we collect, use, store, and disclose information when you use DexterDesk on the web at dexterdesk.com or as an iOS application (collectively, the "Service").

1. Information We Collect

Account information

When you sign up, we collect your email address and a hashed password (we never see your password in plaintext — Supabase Auth handles password hashing). Your subscription status is stored alongside your account.

Connected Google account data

When you connect your Google account via OAuth, we receive limited access to your Gmail and Google Calendar data, as described below. We only receive this data after you explicitly authorize the connection through Google's OAuth consent screen.

Conversation history and memory files

The conversations you have with DEXTER (your assistant) are stored in our database so your assistant can remember context across sessions. You can delete this data at any time from your account settings.

Payment information

Payments are processed by Stripe. We do not store your full credit card number — Stripe stores it on our behalf. We retain a record of your subscription status and billing history.

2. Google User Data — Specific Disclosures

DexterDesk's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Google data we access

  • Gmail (read-only): We read recent emails to allow DEXTER to triage your inbox, surface what matters, and answer questions about your messages. We do not modify, send, or delete emails on your behalf.
  • Google Calendar (read and write): We read upcoming events to help DEXTER answer questions about your schedule, and we create or delete events when you explicitly ask DEXTER to do so.

How we use Google data

  • To provide DexterDesk's core features (email triage, schedule management, conversational assistance).
  • We do not use Google user data for advertising.
  • We do not sell Google user data to any third party.
  • We do not use Google user data to train AI/ML models. Your individual messages and events are passed to the Anthropic Claude API only at the moment they're needed to answer your active query, and are not retained by Anthropic for training (per their privacy policy).
  • We do not share Google user data with anyone besides the service providers necessary to operate DexterDesk (Supabase for database, Anthropic for AI inference, Render for hosting).

How we store Google data

OAuth refresh tokens are encrypted with Fernet symmetric encryption before being stored in our database. Gmail messages and Calendar events are not persisted by DexterDesk — they are fetched in real time when DEXTER needs them. The only Google-derived data we store long-term is what you explicitly ask DEXTER to remember (e.g., "remember that my finance midterm is March 15") — which we store as plain text in your memory files.

How to revoke access

You can revoke DexterDesk's access to your Google account at any time by visiting your Google Account permissions page and removing DexterDesk, or by disconnecting your accounts from within DexterDesk's settings page.

3. iOS App-Specific Disclosures

The DexterDesk iOS app requests the following device permissions, each of which is optional and used only for the corresponding feature:

  • Microphone — used to capture your voice when you tap the microphone or headset button to speak to DEXTER. Audio is transcribed on-device by Apple's Speech Recognition framework; we do not store raw audio.
  • Speech Recognition — Apple's on-device transcription of your spoken queries into text.
  • Photo Library — only when you tap the attach button to share an image with DEXTER. We only access photos you explicitly select.
  • Camera — only when you choose to capture a new photo to share with DEXTER.

The iOS app does not collect device identifiers, location, contacts, or any data beyond what's necessary to authenticate you and deliver the Service.

4. Analytics and Advertising

We use the following analytics and advertising measurement tools to understand how visitors find and use DexterDesk:

  • Reddit Pixel and Conversions API — measures whether visitors who clicked a Reddit ad complete an account signup or subscription. Identifying data (email) is SHA-256 hashed before being sent.
  • Meta Pixel and Conversions API — same purpose as the Reddit Pixel, for ads served on Meta platforms (Facebook, Instagram). Identifying data is hashed before transmission.

These tools enable us to optimize ad delivery to people likely to find DexterDesk useful. They do not impact your use of the Service. You can opt out of personalized advertising via your Reddit ad settings and Meta ad preferences.

5. Third-Party Services

DexterDesk uses the following service providers, each governed by their own privacy policies:

  • Supabase — database and authentication
  • Render — application hosting
  • Anthropic — AI inference (Claude API)
  • ElevenLabs — text-to-speech voice synthesis
  • Stripe — payment processing
  • Google — Gmail and Calendar APIs (only with your explicit OAuth consent)
  • Apple App Store — iOS app distribution and (where applicable) in-app purchases

6. Your Rights

You can request to delete your account and all associated data at any time by emailing cdchaddobson@gmail.com. Account deletion removes your auth record, conversation history, memory files, OAuth tokens, and subscription record. Stripe retains transaction records as required by tax and financial reporting law.

7. Data Retention

Conversation history and memory files are retained while your account is active. If you cancel your subscription, your data remains accessible during the grace period (until your current billing cycle ends), after which the account is deactivated. Permanent deletion happens on request or 90 days after account closure.

8. Children

DexterDesk is not intended for users under 18. We do not knowingly collect data from anyone under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email and by updating the "Last updated" date above.

10. Contact

Questions about this Privacy Policy? Email cdchaddobson@gmail.com.