Privacy Policy

1. Who is responsible

NOSA Studio Ltd, registered in England and Wales, company no. 17423491, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, is responsible for the processing described here. Contact: hello@nosadesk.com.

2. The NOSA Desk software

• NOSA Desk reads your connected folders and mailboxes on your computer. Local reading does not send their contents to NOSA. Optional AI use has separate data flows, explained below and in section 2a.
• Local use needs no NOSA account. Telemetry is off by default; licence checks run offline.
• Automatic update checks are on by default and can be turned off under “Help & Updates”. They ask nosadesk.com for the latest version without email or file contents. You can also start a check there yourself. Updates are installed only after your decision.
• “Get new key” sends your licence number and purchase email to licence.nosadesk.com to receive the latest key. The email address stays in your local settings for this purpose.
• The optional usage line is off by default. If enabled, it sends the app version, language and Windows version (10 or 11) at most daily, without an ID. We count the lines only by day. You can turn it off at any time.
• Online requests reveal your IP address to our hosting provider Cloudflare. Our online services do not store request logs containing your IP address. We keep our own error messages, without IP addresses, for at most 7 days. Cloudflare processes the IP address for delivery and protection against attacks. Separate IP processing for NOSA AI abuse prevention is described in section 2a.
• NOSA AI: Permitted questions and excerpts pass through our AI relay to Anthropic (Claude). Section 2a explains the details.
• Your own AI: The local Claude Desktop connector passes permitted content to Claude Desktop without using our AI relay. Further processing follows the selected AI provider’s settings and privacy terms. Sources can remain blocked for AI.
• The connector's plain-text search index is stored locally in the Desk folder and used only on this PC; when you revoke a permission, the affected index data is no longer used.
• The phone view runs inside your local network, not as a NOSA cloud service.

2a. NOSA AI (optional)

NOSA AI follows after approval for customer launch. This section describes the data flow on deliberate activation, not a promise of current availability.

Your emails, files and personal work data are managed on your device. If you deliberately enable NOSA AI and start a question or preparation, Desk sends your question and selected permitted excerpts through our AI relay to Anthropic for processing by Claude. If the model needs more context, additional bounded permitted excerpts can be sent. Blocked sources stay excluded. Desk calculates calendar counts and free slots locally. Without approval, typing alone does not send content to the AI provider.

The NOSA AI relay does not store questions, emails, document text or model answers in its application data. It processes them in memory to forward the request. Pseudonymous entitlement, usage and cost records are retained to operate and limit the allowance. Monthly and request records are removed after about 100 days. Trial tickets expire after 14 days for Desk; a pseudonymous trial-allocation marker may remain for up to one year. To limit abuse, at most three new trials are issued per public IP address and UTC day. The connection address is processed in memory; only a daily salted pseudonym and counter are stored. These and the daily salt are removed after at most about three days. People on the same office network may share this daily limit. Cloudflare and Anthropic process technical connection data under their respective terms.

Anthropic describes deletion of API inputs and outputs within 30 days by default, with exceptions including policy enforcement, legal requirements and separate agreements. No individual zero-data-retention agreement has been verified for NOSA. Commercial provider terms state that customer content is not used for model training by default. NOSA AI uses the direct Claude API. Processing exclusively in Switzerland or the EU is not promised.

AI is optional. Disabling it prevents further approved calls; it cannot recall content already transmitted. No telemetry by default is a separate statement: an AI task you start transmits the described context.

3. Our website

nosadesk.com is delivered through Cloudflare, which processes technical request data such as your IP address to deliver and protect the site. We do not set advertising or measurement cookies and do not load scripts from advertising or analytics companies. Cloudflare may set a security cookie when a protection feature is active. Visitors do not receive a cookie from us. Only we, as the operator, sign in to our internal statistics page through Cloudflare Access (Cloudflare sets a sign-in cookie for this) and then receive a marker cookie (nosa_intern), so that our own visits and downloads are not counted.

Our own measurement, without cookies. A small script of our own (mess.js) tells our server when a page is viewed and when you click on the demo, the download, the buy page or the checkout. It sends only the type of event, the page path and, if you came through a link with campaign details (utm parameters, for example from an ad), the source, medium, campaign, ad group, search term and the first page you visited. If you come through a link from another website without such details, we send only that website's domain name (for example g2.com or google.com) as the source, never the full address. Cloudflare derives the country from the request. We store only counts per day, event, campaign and country, with no IP address, no identifier and no history of a person. Nothing is stored in your browser; the campaign details are only passed on in the links of the page. Purpose: to see which pages and ads lead to downloads and purchases.

If you come from an ad without campaign details, our measurement script only detects that a Google or Microsoft advertising identifier is present (gclid, gbraid, wbraid, msclkid) and classifies the visit accordingly ("google / ad" or "bing / ad"). We do not copy the identifier value into our analytics data or store it there. As a search term we store only words from our own keyword list; any other word counts as "other". If you open a page that does not exist, the script reports its path. We keep it only if it matches the structure of our site, otherwise only "other".

For downloads we store only aggregate counts by file, day and country, and for the Windows installer also, per day, the domain name of the page the download came from (or "direct") and the campaign details from the download link. Cloudflare derives the country from the request; our counter does not store the visitor's IP address or an individual download history.

4. When you buy

For purchases through our checkout, Sold through Link, LLC (a Stripe service) is the seller and Merchant of Record. Stripe processes payment and billing data as an independent controller under Link’s privacy policy. We do not receive your full card details.

Stripe may share your name, email address, country, company name and VAT number if you gave them, what you bought and the status of your subscription. We use this to issue and send your licence key, to support you and for our accounts.

If you came through a link with campaign details or from another website, we pass these details (source or the referring website's domain name, medium, campaign, ad group, search term, first page) to the checkout. Stripe stores them as extra information on the purchase, and our licence service keeps them in the licence record. We only look at them as totals per campaign, to see which advertising leads to purchases. They contain nothing about you as a person.

To show your licence key right after payment and to email it to you, our licence service (a small program on Cloudflare Workers at licence.nosadesk.com) receives Stripe's notice about your purchase and asks Stripe for your name, email address and company name. It creates your key and sends the email through our email delivery provider Resend. The buy page asks this service for your key: right after payment with the purchase reference Stripe passes back, later with your order number and email address.

5. Licence records

For each licence we keep a record with the licence number, customer name, contact email, plan, number of seats, dates and status. The licence key itself contains the licence number, the plan, the seats, the dates and, if agreed, the name of the licence holder.

6. Email

When you write to us, we use your message and address to reply. Our email is hosted by IONOS SE in Germany.

6a. Business contacts we write to

We sometimes write to businesses that may want to recommend NOSA Desk to their own clients, for example IT service providers, Microsoft 365 consultants, bookkeepers and virtual assistants in the UK and the USA. We look for them ourselves, one by one. We do not buy address lists and we do not send bulk email.

What we use: the company name, the business email address that the company publishes on its own website, its website, country and type of business, its entry in a public company register (for example Companies House), and the date and content of our messages and of any reply.

Where it comes from: the company’s own website and public company registers.

Why and on what basis: to offer a business partnership with one personal email and at most one reminder after 7 days. We do this for our legitimate interest in finding business partners for NOSA Desk (Article 6(1)(f) UK GDPR and, where it applies, EU GDPR). In the UK we only write to companies and LLPs, not to sole traders, and only to business addresses.

How long we keep it: if there is no reply, we delete the contact details no later than 12 months after our last message. If we work together, we keep them for as long as the partnership runs and then as described in section 8.

Who receives it: our email provider IONOS (see section 6) and Anthropic, whose AI assistant Claude we use as a work tool to plan our contacts. We do not sell these details or share them with anyone else.

Your right to object

You can object at any time, and we will stop writing to you. Simply reply “unsubscribe” or write to hello@nosadesk.com. We then keep only the company name and the email address on a do-not-contact list, so that we never write to you again. You also have the rights in section 10, including to complain to the Information Commissioner’s Office.

7. Legal bases

We process personal data to perform our contract with you, to meet legal obligations such as accounting, and for our legitimate interest in running and securing our website and support, and in measuring which pages and advertising work. You can object to this measurement at any time; write to us, or block scripts in your browser. This applies under the UK GDPR, the EU GDPR where it applies, and the Swiss Federal Act on Data Protection.

8. How long we keep data

We normally keep licence and accounting records for six years after the end of the relevant financial year to meet UK tax-record obligations; a legal claim or tax enquiry may require longer retention. We keep support emails only as long as needed for the request, normally no more than three years unless they form part of those records or a legal claim. We keep usage lines and the website measurement counts as daily totals for at most 400 days, as well as the advertising costs we enter and their change log. The campaign details of a purchase are kept as long as the licence record. The try counter for "Get new key" is deleted after one hour.

9. Where data is processed

We and our service providers may process the personal data described here in the UK, Switzerland, the EEA and the United States. Cloudflare, IONOS, Stripe, Resend and Anthropic describe their own processing locations and international transfer safeguards in their privacy notices. You can ask us for details about safeguards for a transfer for which we are responsible.

10. Your rights

You can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing. Write to hello@nosadesk.com. You can also complain to the Information Commissioner's Office (UK), the Federal Data Protection and Information Commissioner (Switzerland) or the data protection authority in your EU country.

11. Changes

We update this policy when our processing changes. The date at the top shows the current version.