Privacy Policy
Saro Desk is an email-based helpdesk operated by Nikita Ojha, an individual based in India (“Saro Desk”, “we” or “us”). This policy explains what information we handle when you use Saro Desk at sarodesk.com and app.sarodesk.com, how we use it, and the choices you have. It takes effect on the date shown above. For any question, email support@sarodesk.com.
Information we collect
- Account information. When you sign in with Google or Microsoft we receive your name, email address, profile picture and basic profile, and we store your role, time zone and app preferences.
- Connected mailbox data. When a workspace connects a support email through Google, Microsoft or Zoho, we access the messages in that mailbox so we can turn them into tickets and send replies. We store an encrypted access token for the mailbox. We do not use email forwarding. Each user may also connect one personal email address for sending replies as themselves; we store an encrypted token for it and do not read or sync that personal mailbox.
- Ticket and customer data. The content of your customers’ emails and their attachments, together with the contacts, tags, internal notes, custom field values and satisfaction (CSAT) responses your team creates in Saro Desk.
- Billing information. Your plan and seat count. Card payments are processed by Paddle; we do not receive or store full card numbers.
- Technical data. The sign-in session cookie and the server and error logs needed to run and secure the service.
How we use your information
We use the information above only to provide and operate Saro Desk: creating and threading tickets from your connected mailboxes, letting agents reply and send satisfaction surveys from your own addresses, assigning and tracking work, measuring response times, billing your subscription and keeping the service secure. We do not sell your information or use it for advertising.
Connected mailbox (including Gmail) data. We read the messages in the support mailboxes a workspace connects so that we can create tickets, keep replies threaded, and show and organise that mail inside Saro Desk, and we send replies and CSAT surveys as the connected address. We request the minimum access scopes needed for this and nothing more. We do not use the contents of your mail for advertising, we do not sell it, and we do not use it to develop, train or improve generalised artificial-intelligence or machine-learning models. We do not allow people to read this data except in the limited cases permitted by Google’s Limited Use policy: with your explicit consent, where necessary for security or to investigate abuse, to comply with the law, or when the data has been aggregated or anonymised. Where a workspace uses the AI features described in the next section, the ticket content involved — which originates from the connected mailbox — is shared with our AI provider only to perform that feature and is not used to train its models.
Google Limited Use. Saro Desk’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
AI features
Saro Desk uses AI, provided by the Anthropic (Claude) API, for several assistive features. A person always reviews the result before anything reaches a customer. For each feature we send only the content that feature needs:
- Sentiment. The customer’s most recent message on a ticket is analysed to label the ticket negative, neutral or positive.
- Plain-language automations. When an admin writes an automation rule in their own words, the rule text and the workspace’s support-email addresses, agent names and tag names are sent so we can turn it into a structured rule for the admin to confirm.
- Auto-tagging (off by default; a workspace turns it on). The content of a new ticket — and later customer replies, if the workspace enables re-checking — is analysed to suggest or apply tags.
- Reply drafts (off by default; only when an agent asks). The ticket conversation and up to three similar resolved tickets are sent to draft a suggested reply, which the agent edits and chooses whether to send.
- Ticket summaries (off by default; only when an agent asks). The ticket conversation is sent to produce a short summary for the agent.
Safeguards:
- Every AI feature other than sentiment and automation parsing is controlled by a per-workspace switch and is off by default; Saro Desk works fully with all of them off.
- AI proposes, a person decides. No AI output is sent to a customer, resolves a ticket or hides anything on its own.
- We send only the content needed for each feature, truncate long inputs and keep personal data out of our logs. Our AI provider processes this content to perform the feature and does not use it to train its models.
Service providers and where your data is stored
We run Saro Desk with a small set of service providers (sub-processors), each used only for the purpose shown. Saro Desk’s own data is hosted in the United States.
| Provider | What it does for Saro Desk |
|---|---|
| Google (Gmail API, sign-in) | Reading and sending mail for connected Google mailboxes; sign-in |
| Microsoft (Graph, sign-in) | Reading and sending mail for connected Microsoft mailboxes; sign-in |
| Zoho (Mail API) | Reading and sending mail for connected Zoho mailboxes |
| Anthropic (Claude API) | The AI features described above |
| Cloudflare (R2) | Storing email attachments |
| Paddle | Processing subscription payments (merchant of record) |
| Postmark | Sending Saro Desk’s own emails (invites, notifications) |
| Render | Application hosting and database (United States) |
| Sentry | Error monitoring |
If you are outside the United States, using Saro Desk means your information is transferred to and processed in the United States and by the providers above.
Retention, your rights, security, and contact
- Retention. We keep your workspace’s data while your account is active. Deleting your workspace deletes its data from Saro Desk and revokes the access tokens for its connected mailboxes.
- Your choices. You can disconnect any mailbox at any time, which revokes its token; you can turn the AI features on or off; and you can ask us to access, correct, export or delete your personal information by emailing support@sarodesk.com.
- Security. Mailbox tokens are encrypted at rest and are never shown in the app or in logs; email content is sanitised before it is stored and displayed; each workspace’s data is kept separate from every other workspace’s; and traffic is encrypted in transit. No service can promise perfect security, but we take reasonable measures to protect your data.
- Cookies. We use only the cookies needed to keep you signed in. We do not use advertising or cross-site tracking cookies.
- Children. Saro Desk is a tool for businesses and is not directed at children under 18.
- Changes. We will update this page when our practices change and revise the date shown at the top.
- Contact. Nikita Ojha, Saro Desk, India — support@sarodesk.com.