Privacy Notice
What we collect, why, where it lives, and how to ask us to delete it.
This notice describes how Digital Information Technology Solutions (“we”) handles personal data in connection with the Reqdesk service.
1. What we collect
- Account data — name, email, optional phone number, and the workspace(s) you belong to.
- Authentication metadata — sign-in events, last-active timestamps, OIDC identity claims (we never see your password).
- Service content — the tickets, replies, attachments, and metadata you place into your workspace.
- Operational telemetry — request logs, error traces, and aggregate usage counts. Telemetry never includes ticket content.
2. Why we collect it
- To operate the Service.
- To enforce per-workspace isolation (see
/security). - To bill paid workspaces (handled by Moyasar; we receive a tokenised reference).
- To comply with applicable Saudi law.
We do not sell or rent personal data to third parties. We do not use your service content to train any model.
3. Where it lives
Service content is stored on infrastructure in a single hosting region, encrypted at rest. Encrypted backups stay within the same region. Operational telemetry is processed via our central observability stack at logs.mod-sol-sa.com. KSA data residency for paid workspaces is on our roadmap; if you have a hard residency requirement today, contact sales@reqdesk.support before subscribing so we can confirm in writing whether we can meet it.
The third-party processors we rely on:
- Cloudflare — Turnstile bot challenge for the public sales-leads form. No personal data exchanged.
- Moyasar — payment processing for paid plans (PCI-DSS Level 1).
- Google Fonts — typography served via Google’s CDN; the browser request reveals only that the page was visited.
4. Your rights
You may request:
- Access — a copy of the personal data we hold about you.
- Correction — to fix inaccurate data.
- Deletion — of your account and all associated data, subject to legal retention requirements.
- Portability — an export of your workspace content in machine-readable form.
Email privacy@reqdesk.support with your request. We respond within thirty (30) days.
5. Retention
- Account data is retained for the life of the account, plus thirty (30) days after deletion.
- Service content is retained for the life of the workspace, plus thirty (30) days after a hard-delete request.
- Operational telemetry is retained for ninety (90) days.
6. Children
The Service is not directed at individuals under sixteen (16) years of age. We do not knowingly collect personal data from anyone under that age.
7. Changes
This notice may be updated; substantive changes are announced thirty (30) days in advance via the workspace owner’s contact email.
For questions, write to privacy@reqdesk.support.