Home
Legal

Privacy Policy

Last updated: April 2026

1. Introduction

BeatDesk Inc. ("we", "us", or "our") operates BeatDesk.io (the "Service"), a media contacts platform for public relations professionals. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Quebec Law 25).

2. Information We Collect

a) Account Information

  • Name, email address, and profile information provided during registration through Clerk (our authentication provider)
  • Organization name and role, if provided
  • Password and authentication credentials (managed securely by Clerk)
  • Billing and payment information, if applicable

b) Service Usage Data

  • Pitch text, campaign content, and email templates you create within the Service
  • Campaign analytics: send counts, open rates, and engagement metrics
  • Feature usage patterns, search queries, and interaction logs

c) Email Account Data

  • OAuth access tokens for Google and/or Microsoft email accounts you choose to connect
  • Sender name and email address associated with your connected accounts
  • We do not read, store, or access the content of your personal inbox. OAuth tokens are used solely to send emails on your behalf through the Service.

3. How We Use Your Information

  • Providing and operating the Service, including journalist matching, pitch analysis, and email campaign delivery
  • Authenticating your identity and managing your account
  • Sending emails on your behalf to media contacts through your connected email accounts
  • Improving the Service through aggregated, anonymized usage analytics
  • Communicating with you about your account, service updates, and support requests
  • Complying with legal obligations and enforcing our Terms of Service

4. Email Account Access

When you connect a Google or Microsoft email account, we request only the permissions necessary to send emails on your behalf. Specifically:

  • We store encrypted OAuth tokens to authenticate with your email provider
  • We use these tokens exclusively to send campaign emails that you initiate through the Service
  • We never read your inbox, access your contacts outside the Service, or use your email account for any purpose other than sending the campaigns you create

You can disconnect your email account at any time through your account settings, which will immediately revoke our access.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • With service providers who help us operate the Service (hosting, authentication, analytics), subject to contractual obligations to protect your data
  • When required by law, regulation, or legal process (e.g., a court order or subpoena)
  • To protect the rights, safety, or property of BeatDesk Inc., our users, or the public

6. Data Storage and Security

Your data is stored in secure, encrypted databases hosted on cloud infrastructure in North America. We implement industry-standard security measures to protect your personal information, including:

  • Encrypted data transmission (TLS/SSL) for all communications between your browser and our servers
  • Encrypted storage for sensitive data including OAuth tokens and credentials
  • Role-based access controls limiting employee access to personal data on a need-to-know basis

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or dispute resolution).

Campaign analytics and aggregated usage data may be retained in anonymized form indefinitely for the purpose of improving the Service.

8. Your Rights Under Canadian Privacy Law

Under PIPEDA and Quebec Law 25, you have the following rights regarding your personal information:

  • Access: You may request a copy of the personal information we hold about you
  • Correction: You may request correction of inaccurate or incomplete personal information
  • Deletion: You may request deletion of your personal information, subject to legal retention requirements
  • Portability: You may request your data in a structured, commonly used format
  • Withdrawal of consent: You may withdraw your consent to the processing of your personal information at any time, which may limit your ability to use certain features of the Service
  • Complaint: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada or the Commission d'acces a l'information du Quebec

To exercise any of these rights, please contact us at support@beatdesk.io. We will respond to your request within 30 days.

9. Cookies and Analytics

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how the Service is used. These include:

  • Essential cookies: Required for authentication and core functionality. These cannot be disabled.
  • Analytics cookies: Help us understand usage patterns and improve the Service. You may opt out of non-essential analytics through your browser settings.

10. Third-Party Services

The Service uses the following third-party services that may process your personal information:

  • Clerk (authentication and user management)
  • Google and Microsoft (email account OAuth integration)
  • Cloud infrastructure providers (hosting and database services)

Each third-party service operates under its own privacy policy. We encourage you to review their policies to understand how they handle your data.

11. Children's Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

12. International Data Transfers

Your data may be processed and stored on servers located outside of Quebec or Canada, including in the United States. When your data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with PIPEDA and Quebec Law 25 to protect your personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and notify you by email or through a prominent notice in the Service. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a privacy-related concern, please contact us at:

support@beatdesk.io