Privacy Policy

Yeti Brands, LLC, doing business as RepDesk ("RepDesk," "we," "our," or "us") operates the RepDesk CRM platform (the "Service") at repdesk.io. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

• Account registration data (name, email address, company name, role)
• Business data you input into the Service (contacts, accounts, quotes, orders, commissions)
• Payment and billing information (processed by third-party payment processors)
• Communications you send us (support requests, feedback)

1.2 Information Collected Automatically

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (device type, operating system)
• Usage data (features used, actions taken within the Service)
• Cookies and similar tracking technologies

1.3 Information from Third-Party Integrations

When you connect third-party services to RepDesk, we may receive data from those services to provide the requested functionality. This includes:

• QuickBooks Online (Intuit): Invoice data, customer records, and payment status when you connect your QBO account. We access only the data necessary to create invoices and sync payment statuses on your behalf. We do not store your QuickBooks financial data beyond what is required to operate the integration.
• ShipStation: Shipment and order fulfillment data.
• Google: Calendar events and Gmail data (when Google integrations are enabled) subject to Google's API Services User Data Policy.
• JustCall: Call logs and communication history.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Process transactions and send related information (confirmations, invoices, receipts);
• Respond to comments, questions, and requests and provide customer support;
• Send technical notices, updates, security alerts, and administrative messages;
• Monitor and analyze trends, usage, and activities in connection with the Service;
• Detect, investigate, and prevent fraudulent transactions and other illegal activities;
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your business data (contacts, quotes, orders) for any purpose other than operating the Service on your behalf.

3. QuickBooks Online Data Use

RepDesk's use of data obtained through the QuickBooks Online API is limited to the following purposes:

• Creating invoices in your QuickBooks Online account from accepted quotes;
• Looking up or creating customer records in QuickBooks Online;
• Checking the payment status of invoices to update quote statuses in RepDesk;
• Displaying connection status and account information to authorized administrators.

OAuth tokens used to access QuickBooks Online are encrypted using AES-256-GCM and stored securely on a per-company basis. We do not share QuickBooks data with any third parties and do not use it for advertising or any purpose beyond operating the integration as described above.

You may disconnect your QuickBooks Online account at any time from the Admin → Integrations page. Upon disconnection, all stored OAuth tokens are revoked and deleted.

4. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf (cloud hosting, database services, analytics), subject to confidentiality obligations;
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice;
• Legal Requirements: When required by law, court order, or governmental authority;
• Protection of Rights: To protect the rights, property, or safety of RepDesk, our users, or the public.

5. Data Security

We implement commercially reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• AES-256-GCM encryption for all stored integration credentials and OAuth tokens;
• TLS encryption for all data in transit;
• Row-level security policies in our database to ensure company data isolation;
• Role-based access controls limiting data access to authorized personnel.

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. You may request deletion of your account and associated data by contacting us at privacy@repdesk.io. We will fulfill deletion requests within 30 days, subject to legal retention obligations.

7. Cookies

We use cookies and similar tracking technologies to track activity on the Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you;
• Correction: Request correction of inaccurate personal data;
• Deletion: Request deletion of your personal data;
• Portability: Request a machine-readable copy of your data;
• Objection: Object to certain processing of your data.

To exercise these rights, contact us at privacy@repdesk.io.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification. Your continued use of the Service after any changes constitutes acceptance of the revised Policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: