Privacy Policy

This Privacy Policy explains how Greenwich Capital Resources, LLC, a Delaware limited liability company ("Greenwich Capital Resources," "GCR," "we," "us," or "our"), the operator of HeizerDesk (the "Service"), collects, uses, and shares information. It applies to our website and the Service. By using the Service, you agree to this Policy. This Policy is incorporated into and subject to our Terms of Service.

If you use the Service to handle calls, messages, or bookings for your own business, you are the controller of your callers' and customers' information, and you are responsible for providing them any notices and obtaining any consents required by law. We act as your service provider for that information.

We collect the following categories of information:

• Account and business information — name, business name, email, phone numbers, address, and the configuration and preferences you provide when you sign up and set up the Service.
• Communications content — call audio, recordings, transcripts, messages, voicemails, and related metadata (such as phone numbers, timestamps, and call outcomes) that the Service processes on your behalf.
• Usage and device information — log data, IP address, browser and device information, and how you interact with the Service, collected automatically including through cookies and similar technologies.
• Payment information — billing details processed by our third-party payment processor. We do not store full card numbers; card data is handled by the processor and never touches our servers.

We use information to operate, provide, maintain, secure, support, and improve the Service; to answer, route, and follow up on calls and messages; to make and manage bookings; to process payments and administer subscriptions; to communicate with you; to detect, prevent, and address fraud, abuse, security, and technical issues; to comply with law; and to develop and improve our features and models. We use evolving artificial intelligence to deliver the Service.

The Service may record and transcribe calls and messages. Recording and monitoring laws vary by state and country, and some require the consent of all parties. You are responsible for determining what notices and consents apply to your callers and customers and for ensuring they are provided. You agree to hold us harmless for your recording, monitoring, or messaging practices, as described in our Terms of Service.

We do not sell your personal information, and we do not use your call content to train third-party AI models for their own general purposes. We share information only as needed to run the Service:

• Service providers and subprocessors — third-party providers that power the Service, including telecommunications carriers, voice and AI model providers, hosting and cloud platforms, calendar, email, and messaging providers, and payment processors. These providers process information on our or your behalf and are subject to their own terms and privacy practices.
• Legal and safety — when we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of GCR, our users, or others, or to enforce our Terms.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.
• With your direction — where you configure the Service to share information (for example, sending a booking to your calendar or a message to your team).

The Service depends on third-party providers and infrastructure that we do not own or control. Their handling of information is governed by their own privacy policies and terms, and we are not responsible for their practices. We select providers we consider reputable, but we do not guarantee their security or performance.

We retain information for as long as your account is active and as needed to provide the Service, and thereafter as needed to comply with legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes. We may retain de-identified or aggregated information indefinitely. You may request deletion as described below, subject to these retention needs.

We use commercially reasonable, best-effort administrative, technical, and organizational measures designed to protect information. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee absolute security. You use the Service at your own risk, and, to the fullest extent permitted by law, we are not liable for unauthorized access, disclosure, loss, or alteration of information, including any caused by third-party providers or events beyond our reasonable control.

You can access and update much of your account information within the Service, and you can cancel your subscription at any time. Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, or to object or opt out of certain processing. To make a request, contact us at hello@heizerdesk.com; we will respond as required by applicable law and may need to verify your identity. If you handle callers' or customers' information through the Service, direct their requests to you as the controller, and we will assist you as your service provider.

Our website uses cookies and similar technologies to operate the site, remember preferences, keep you signed in, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect how the site works.

The Service is intended for businesses and is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

The Service is operated from and information is processed in the United States and other locations where we or our providers operate. If you access the Service from outside the United States, you consent to the transfer and processing of information in the United States, which may have different data-protection laws than your jurisdiction.

We may update this Policy from time to time. Changes are effective when posted with an updated date. Your continued use of the Service after a change constitutes acceptance of the updated Policy.

Questions or requests regarding this Policy may be sent to hello@heizerdesk.com. HeizerDesk is operated by Greenwich Capital Resources, LLC, a Delaware limited liability company. This Policy is governed by the laws of the State of Delaware.