Privacy
PostDesk privacy
This page summarizes PostDesk-specific processing. StackDeck ID remains the source of account preferences and the family policy remains canonical.
Data PostDesk stores
People and their consent live in Knownry, not in PostDesk. PostDesk stores workspace membership, provider connections, templates, campaigns, recipient queues, suppressed addresses, send attempts, and provider-reported outcomes. Its local account row mirrors locale and timezone from StackDeck ID.
Signup context
A signed, HttpOnly cookie keeps the first landing pathname, external referrer hostname, and allowlisted campaign fields for up to one hour. It contains no raw IP or arbitrary query values. StackDeck ID records edge-derived country separately as signup context, not residence.
Analytics
When site analytics is configured, accepting analytics permits persistent measurement and session recording. Essential-only mode may send cookieless anonymous page and interaction events using memory-only persistence, with no person profile or session recording.
Retention and control
Workspace operators manage templates, campaigns, provider connections, and membership in PostDesk, and people and consent in Knownry. Delivery and security records may be retained to operate and protect the service. Contact privacy@stackdeck.dev for account access or deletion requests.
Subprocessors
PostDesk runs on managed cloud infrastructure with relational database storage, the email provider you configure, and a site analytics provider when analytics is enabled.