Legal
Privacy Policy
Last updated 15 October 2026.
This policy covers everything you do on this website — browsing it, contacting us, chatting with us, applying for a job, opening an account, and placing orders. Two companion documents go deeper on the wallet: the QCoin Payment Policy and the QCoin Wallet Privacy Notice.
Who we are
QDesk Data Solution and Services (“we”, “us”) is an ITeS and SaaS company operating from Lucknow, Uttar Pradesh, India. Our head office is at FF130, Palika Bazar, Kapoorthala Commercial Complex, Aliganj, Lucknow — 226024, Uttar Pradesh, India, and our delivery floor is at Rampur Devrai, Behind BKT Cold Store, Sitapur Road, Bakshi ka Talab, Lucknow — 226201, Uttar Pradesh, India. We are the controller of the personal information described in this policy. Reach us at contact@qdeskdss.com or +91-9839009990.
The short version
- You can read this entire website without telling us who you are.
- We collect what you actively give us — an enquiry, a chat, a job application, an account, an order — plus first-party analytics about which pages get read.
- We never see or store your card or bank details. Payment happens on our processors’ systems.
- We do not sell personal information, we run no third-party advertising trackers, and we do not use your order content to train machine learning models.
- The staff who carry out your work do not know who you are. That is enforced by the software, not by a promise.
What we collect, and when
When you simply browse
Our own first-party analytics records the page viewed, the page title, the referring website, any UTM campaign parameters in the link you followed, your approximate device type, browser and operating system, your IP address, and a random visitor identifier stored in a cookie. Requests that identify themselves as bots or crawlers are not recorded at all. We use no Google Analytics, no advertising pixels and no cross-site trackers.
When you send an enquiry
Your name, email address, phone number, company, country, the subject you select and the content of your message, together with the IP address and browser string of the submission so we can identify spam.
When you use live chat
Your email address, your country, an optional name, and the full transcript of the conversation. We send a one-time code to your email address to confirm it is yours; that code is stored only as a hash and only until it is used or expires. A cookie keeps your chat session for 90 days so the conversation is still there if you come back.
Chat may be answered by an AI assistant. When it is, the messages in that conversation are sent to Anthropic’s Claude API to generate a reply, and are handled under Anthropic’s terms for API traffic. A human member of our team can take over at any point, and the conversation is stored on our systems either way. Please do not send confidential information, credentials or payment details through chat.
When you apply for a job
Your name, contact details, city, experience, notice period, any salary information you choose to give, links you supply, and your CV file.
When you open an account
Your name, email address, and a hashed password — we never store the password itself. If you sign in with Google, we store the identifier Google gives us so we can recognise you next time; we never receive your Google password. We email you a one-time verification code, stored as a hash until used.
When you place an order
Everything you put into the order: the brief, every message in the thread, and every file you attach. Attachments are stored outside the publicly reachable part of the site and can only be downloaded through a link that re-checks your permission on every request.
When you top up your wallet
The amount, date, processor reference and resulting balance. Not your card number, bank details or payment credentials — those are entered directly on Razorpay’s or PayPal’s systems and are never transmitted to or stored by us. The QCoin Wallet Privacy Notice covers this in full.
Cookies we set
All of our cookies are first-party, HTTP-only, and set with SameSite=Lax. We set no advertising or cross-site tracking cookies, so there is no ad-consent banner on this site.
| Cookie | Purpose | Lifetime |
|---|---|---|
qdsess | Keeps your session while you are signed in or filling in a form. | Session |
qd_vid | A random identifier so our analytics can tell a returning reader from a new one. It holds no name, email or account link. | 1 year |
qd_chat | Reconnects you to your live chat conversation if you return. | 90 days |
qd_customer_remember | Keeps you signed in to your customer account between visits. Set only if you sign in. | Up to 10 hours of inactivity |
qd_remember | The same, for QDesk staff signing in to the admin area. | Up to 10 hours of inactivity |
You can delete or block cookies in your browser. Blocking qdsess will stop sign-in and forms from working; blocking the others simply removes the convenience they provide.
Why we use it, and on what basis
- To provide what you asked for — answering an enquiry, running a chat, processing an order, taking payment, operating your account. Necessary to perform our contract with you, or to take steps at your request before entering one.
- To assess a job application and keep you informed at each stage. Steps taken at your request, and our legitimate interest in recruiting.
- To understand how the website is used so we can improve it. Our legitimate interest in running a useful website, pursued with first-party analytics rather than third-party tracking.
- To keep the service secure, detect spam and fraud, and defend legal claims. Our legitimate interest in operating safely.
- To meet legal obligations, including tax, accounting and audit record-keeping.
We do not carry out automated decision-making that produces legal or similarly significant effects about you. The AI chat assistant answers questions and routes conversations; it makes no decision about your account, your money or your application.
Who at QDesk can see what
Access is limited by role, in the software rather than by convention. Most relevantly, if you place orders: the Operations Manager who carries out your work and the QC Expert who reviews it see you as an internal codename such as “Slate Kestrel 412”. They are not shown your name, your email address or your wallet balance — and those fields are not retrieved from our database on their screens at all, so there is nothing on the page to expose. Only administrators can connect a codename to a real account, and every such access is written to our access log. Your codename is internal, is never shown to you, and is never used in correspondence.
Who we share it with
We do not sell personal information. We share it only with:
- Razorpay and PayPal — to take payment. They act as independent controllers of what you give them and apply their own privacy policies.
- Google — only if you choose to sign in with a Google account.
- Anthropic — messages in an AI-answered live chat, to generate the reply.
- Our hosting and email delivery providers — acting under contract, on our instructions.
- Anyone we are legally required to disclose to, such as a tax authority or a court.
We do not share order content with anyone outside QDesk unless you instruct us to.
Where your information is processed
We operate from Lucknow, India, and your information is processed there. If you are in the United Kingdom, the European Economic Area, or another region that restricts international transfers, please note that India is not currently the subject of an adequacy decision. We will enter into standard contractual clauses or the equivalent safeguard for your jurisdiction on request, and we engage our own processors on equivalent terms.
How long we keep it
| What | Kept for |
|---|---|
| Enquiries | As long as needed to deal with the enquiry and any relationship arising from it. |
| Chat transcripts | Retained for quality and analysis, then removed on a rolling basis. |
| Job applications and CVs | Up to 24 months so we can consider you for future openings, unless you ask us to remove them sooner. |
| Account records | While your account is open, and a reasonable period afterwards. |
| Order content and attachments | The life of the order plus a limited period, so a result can be re-sent or a dispute resolved. We will delete an order’s files sooner on request, provided no dispute is open. |
| Wallet and payment records | As long as tax, accounting and audit law requires. This is longer than the rest and we cannot shorten it on request. |
| Analytics and access logs | Removed on a rolling basis. |
Your rights
Depending on where you live, you may ask us to give you a copy of the personal information we hold about you, correct it, delete it, restrict how we use it, object to a particular use, or provide it in a portable form. You may also withdraw consent where we relied on it. Email contact@qdeskdss.com and we will respond within a reasonable period, at no charge.
One honest limit: a deletion request cannot remove financial records we are legally obliged to keep. Where that applies we will tell you exactly what is being retained and why, and delete everything else.
If you are unhappy with how we handled a request you may complain to your local data protection authority. We would appreciate the chance to put it right first.
Children
This website and our services are intended for businesses and for adults. We do not knowingly collect personal information from children. If you believe a child has given us information, tell us and we will delete it.
Security
Access is limited to the people who need it, enforced by role. Passwords are stored only as hashes, staff and customer sessions expire after inactivity, persistent sign-in tokens are stored as hashes and rotate on every use, and administrative actions are logged. Uploaded files are stored outside the publicly browsable areas of the site and served only after a permission check. Traffic is protected by TLS where it is enabled on the hosting. No system is perfect: if we become aware of a breach affecting your information, we will notify you and the relevant authority as the law requires.
Links to other websites
Where we link out — to a payment processor, a product site, or a source cited on the blog — those sites have their own privacy policies, and we are not responsible for their practices.
Changes
We may update this policy. The date at the top of this page shows when it was last revised. Where a change is material and affects account holders, we will bring it to your attention in your account.
Contact
Questions, requests or complaints about privacy: contact@qdeskdss.com, marked for the attention of the data protection contact, or by post to QDesk Data Solution and Services, FF130, Palika Bazar, Kapoorthala Commercial Complex, Aliganj, Lucknow — 226024, Uttar Pradesh, India.