Privacy Policy

1. Data controller

The controller of your personal data is HAVEN GLOBAL SERVICES LTD, a private limited company registered in England and Wales (company number 16267495), First Floor Office, 3 Hornton Place, London, W8 4LZ, United Kingdom. For any privacy question or request, email info@havenglobal.services (or support@isoladesk.app). We process personal data in accordance with the UK GDPR, the UK Data Protection Act 2018 and, for people in the European Economic Area, the EU GDPR.

2. Data we collect

a) When you subscribe

Payment happens entirely on Stripe’s secure checkout page. At checkout, Stripe collects your email address, your name, your billing country and postal address (needed to calculate tax), your tax ID if you choose to provide one, and your payment details. We can see these details, except your payment details, in our Stripe account, and our license server records your email address, the amount and currency paid, your Stripe customer and subscription identifiers, your subscription status (active, cancelled, ended) and the date your paid period ends or renews. Payment is handled entirely by Stripe: we never see or store your card number. Stripe keeps your payment method to charge the yearly renewals.

The customer portal, where you update your card, download invoices or cancel, is operated by Stripe. Stripe sends the login link to the email you enter there and informs us of any change to your subscription.

b) When you activate and use your license

When you activate IsolaDesk, and then periodically to refresh the license, the app sends us:

• your license code;
• a device identifier: a one-way SHA-256 hash of your Mac’s hardware UUID. It cannot be reversed to recover the identifier, your name or anything else about your Mac;
• the device name you see in the app (for example “MacBook Pro”), so you can recognise your Mac;
• the app version.

We store these together with the activation date and the date of the last license check. Your IP address is processed transiently for rate limiting and security; it is not stored in our database. If you click “Buy” from inside the app, the checkout link may include the device identifier so your license can be linked to your Mac.

c) When you contact us

We receive your email address, the content of your message and anything you choose to attach. The lost-key form on the Support page sends us the email address you type, so we can email you the codes linked to it.

d) When you visit the website

The website has no analytics, no advertising cookies and no tracking. Our host Cloudflare processes the technical data any web server receives — IP address, browser user agent, page requested, date and time — to deliver the pages and protect the site against abuse.

e) Inside the app

The 14-day free trial is tracked locally on your Mac; nothing is sent to us for it. To check for updates, the app downloads a small version file from isoladesk.app, which appears in Cloudflare’s technical logs like any web request.

3. What we never collect

IsolaDesk runs WhatsApp Web locally on your Mac, in isolated sessions. Your messages, contacts, phone numbers, media, QR-code sessions and other WhatsApp data stay on your Mac and are exchanged directly between your Mac and WhatsApp/Meta. They are never sent to us and we have no access to them. WhatsApp’s processing is governed by WhatsApp’s own privacy policy.

4. Purposes and legal bases

We do not use your data for advertising or profiling, we do not sell it, and we make no decisions about you based solely on automated processing.

5. Processors

We only share data with the providers we need to run IsolaDesk:

• Stripe — payments, subscriptions, tax calculation, receipts and invoices, and the customer portal. For some purposes, such as fraud prevention and its own legal obligations, Stripe acts as an independent controller; see stripe.com/privacy.
• Cloudflare, Inc. — hosting of the website, the license API, its database and the downloads; security; and email sending (license codes and lost-key emails) through Cloudflare Email Service. See cloudflare.com/privacypolicy.

We may also disclose data where required by law or to defend our rights. We never sell or rent your data.

6. International transfers

Stripe and Cloudflare may process data in the United States and other countries outside the UK and the European Economic Area. These transfers are covered, as applicable, by the UK International Data Transfer Agreement or Addendum, the European Commission’s Standard Contractual Clauses, and the EU–US Data Privacy Framework and its UK extension.

7. Retention

• License and billing records (email, code, subscription and transaction data): for as long as your subscription runs, then 6 years after it ends, as required by UK tax and accounting law.
• Device records (device identifier, device name, app version, dates): deleted when you deactivate the Mac or when we remove it at your request.
• Support emails: 3 years after your last message.
• Server logs (Cloudflare): short-lived, kept only for security and troubleshooting.

8. Your rights

You have the right to access your data, to have it rectified or erased, to restrict or object to its processing, and to data portability. To exercise these rights, email info@havenglobal.services, ideally from the address linked to your subscription. We answer within one month. Some data may have to be kept despite an erasure request (for example, accounting records).

You can also lodge a complaint with a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the authority of your country of residence (in France, the CNIL — cnil.fr).

9. Cookies and trackers

This website sets no cookies and uses no analytics, advertising or third-party scripts — only what is strictly necessary to serve the pages. Fonts and images are served from our own domain. Stripe’s checkout page and customer portal, which are operated by Stripe, use their own cookies, notably for security and fraud prevention.

10. Security

All connections are encrypted (HTTPS). Licenses are verified with cryptographic signatures, device identifiers are stored as one-way hashes, and access to our back office is restricted.

11. Children

IsolaDesk is not intended for children under 16, and we do not knowingly collect their data.

12. Changes and contact

We will update this policy if our practices change and indicate the date of the latest version at the top of the page. Questions: info@havenglobal.services — HAVEN GLOBAL SERVICES LTD, First Floor Office, 3 Hornton Place, London, W8 4LZ, United Kingdom.