Privacy Policy

1. Introduction and Core Principles

MorrisDesk is a simple customer relationship management (CRM) application built for small businesses, consultants, agencies, franchise brokers, and owner-operated teams. Our primary purpose is helping you keep track of contacts, opportunities, notes, tasks, appointments, and follow-ups so you always know who needs attention today.

We built MorrisDesk around a straightforward data commitment: your customer records, pipeline data, and sales notes belong entirely to you. We process your information solely to deliver, secure, and improve the service. We do not sell customer CRM content, monetize contact lists, or broker lead data under any circumstances.

2. Information We Collect

To operate the service effectively, MorrisDesk collects specific categories of information when you interact with our website or web application:

• Account Information: When you register for a MorrisDesk account, we collect your full name, work email address, password hash, workspace name, and Desk Name personalization preference.
• Workspace Content: As you use MorrisDesk, you create and store workspace content. This includes contact records (names, phone numbers, email addresses, mailing addresses), company profiles, sales opportunities, pipeline stages, activity notes, appointment logs, tasks, and follow-up schedules.
• Billing and Payment Data: When you subscribe to a paid workspace plan, payment transactions are processed directly by our secure third-party payment gateway. MorrisDesk receives billing transaction confirmation and account status updates but does not store full payment card numbers on our servers.
• Technical and Usage Logs: We collect standard operational logs necessary to maintain system security and availability. This includes IP addresses, browser types, operating system details, access timestamps, and session state identifiers.

3. How We Use Your Information

We use the data we collect for strict operational and service purposes, including:

• Providing the CRM Service: Authenticating users, loading your workspace dashboard, calculating follow-up queues, organizing opportunity pipelines, and saving your notes and appointments.
• Account Management and Support: Processing plan subscriptions, managing seat additions, delivering billing receipts, responding to customer support requests, and sending essential system notifications.
• Platform Security and Integrity: Verifying user access permissions on every server request, preventing fraudulent or abusive activity, and ensuring system stability.
• Service Improvement: Diagnostic analysis of aggregated system performance to resolve bugs and optimize software response times.

4. Workspace Data Separation and Isolation

MorrisDesk is built with strict multi-workspace data isolation at the application and database layers. An individual user account may belong to multiple workspaces, but data across workspaces is completely separate.

Every server request checks authorization credentials against the specific active workspace identifier. Members of one workspace can never view, query, or access records belonging to another workspace unless explicitly invited as an authorized team member by that workspace Account Owner.

5. Data Practices We Never Engage In

To maintain absolute transparency with our users, MorrisDesk pledges that:

• We never sell your CRM contact lists, lead details, or workspace notes to third parties.
• We never broker leads or share customer data with lead generation networks.
• We never display advertisements within the workspace interface or use your customer data for targeted third-party advertising campaigns.
• We never mine your customer communications or sales opportunities to build commercial market intelligence reports.

6. Third-Party Services and Subprocessors

MorrisDesk works with a limited group of trusted third-party service providers (subprocessors) to host infrastructure, process payments, and deliver transactional account emails.

All subprocessors undergo security reviews and are bound by contractual obligations to handle data strictly according to our instructions and applicable privacy laws. Subprocessors are never permitted to use your workspace content for their own independent marketing or commercial purposes.

7. Data Retention and Deletion

We retain your workspace content for as long as your workspace account remains active and paid in full. If you cancel your subscription or request account closure, your workspace data enters a scheduled retention period. During this period, the Account Owner can request a full data export or confirm immediate permanent deletion.

Once the scheduled retention window expires, all associated contacts, opportunities, tasks, notes, and activity logs are permanently purged from active production databases and scheduled for routine removal from backup systems.

8. Your Rights and Controls

Depending on your jurisdiction, you possess specific legal rights regarding your personal data and workspace content:

• Right to Access and Export: You can view all workspace content directly inside the platform or export contacts and records into standard data formats at any time.
• Right to Correction: You can edit or update inaccurate contact information, workspace settings, or account details directly within the interface.
• Right to Deletion: Account Owners may request full workspace deletion by reaching out through our customer support channels.
• Communication Preferences: You may opt out of non-essential marketing updates or newsletters using the unsubscribe link provided in those messages. Essential transactional communications regarding billing or account security cannot be disabled while an account remains active.

9. Security Measures

We employ technical and organizational safeguards designed to protect workspace data against unauthorized access, loss, alteration, or disclosure. All data sent between your browser and MorrisDesk is encrypted in transit using standard Transport Layer Security (TLS). Data at rest is encrypted in secure hosting environments with strict network firewalls and access controls.

10. International Transfers

MorrisDesk infrastructure is managed on secure servers in designated cloud facilities. If you access the service from outside these regions, your information will be processed in accordance with this Privacy Policy and relevant international transfer mechanisms.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect product improvements, new service features, or regulatory updates. When changes occur, we will update the date at the top of this policy and notify Account Owners of significant updates through administrative notices.

12. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your workspace data is handled, please reach out to us through our Contact Page or by reviewing our Terms of Service.