Legal

Overdesk's legal documents are published on overdesk.io. This page tells you which one answers which question, so your legal or procurement team can go straight to the right place. The documents themselves are the authority; nothing here changes them.

The documents

Document	Read it for
Terms of Service	The agreement between your organisation and Overdesk: what the service does, acceptable use, fees, termination and liability
Privacy Policy	How personal data is processed, Overdesk's role for your support content, the full sub-processor list, the retention schedule, and the rights you and your customers have
Security and data handling	What leaves Overdesk and under whose account, how personal details are replaced and where that stops, deletion and erasure, and how to report a vulnerability
Security implementation notes	The mechanics behind the security page, for reviewers who want the detail

Controller and processor

For your customers' personal data inside your support conversations, you are the controller and Overdesk is the processor. The Privacy Policy explains what that means in practice and how to ask for a separate data processing agreement.

Accepting the documents

Everyone in your workspace accepts the Terms of Service and the Privacy Policy: the person who creates the workspace does so at sign-up, and each invited person does so when they accept their invitation. Each document carries its own version. When a new version of one is published, everyone is asked to read it and accept again the next time they open Overdesk, and a change to one document does not ask anyone to accept the other again.

Overdesk keeps a record of every acceptance, and that record survives even if the workspace is deleted.

Questions about these documents go to hello@overdesk.io.