Privacy Policy

This Privacy Policy explains how TriageDesk (“TriageDesk,” “we,” or “us”), a Compound Labs product, collects, uses, and protects information when you use the Service. TriageDesk works inside a mailbox you already own, so the shape of this policy follows from that: we hold what the loop needs to read your inbox and draft a reply, and your mailbox stays the system of record.

What we collect

• Account information — your name, business name, email, and sign-in details.
• Messages from your shared inbox — the subject, sender, body text and timestamps of mail the overnight pass reads, plus the classification it assigned and the reply it drafted. Bodies are stored because the queue has to show you what you are answering.
• Mailbox credentials — the OAuth access and refresh tokens for the Microsoft 365 or Gmail account you connect. They are encrypted at rest and are never sent to a browser.
• Usage data — basic information about how you use the Service, used to keep it running and improve it.

How we use it

• To read the unread mail in your shared inbox and work out what each message is.
• To draft one reply per conversation for a person on your team to approve, edit or kill.
• To send an approved reply from your own mailbox, and to record that it went.
• To provide, secure, and improve the Service.
• To communicate with you about your account.

We do not sell your personal data, and the contents of your mailbox are never used to train a model for anyone — including us.

Connected accounts

When you connect a mailbox you authorize TriageDesk to access it through that provider’s official API, using the narrowest permissions the loop needs: Mail.ReadWrite and Mail.Send on Microsoft 365, and the single gmail.modify scope on Gmail. You can disconnect at any time, which stops all future access immediately.

Sharing

We share data only with service providers that help us operate the Service (such as hosting, database and payment processing) under agreements that protect it, or when required by law. A drafted reply reaches its recipient only after a person on your team approves it.

Retention

We keep your data for as long as your account is active and as needed to provide the Service. When you close your account, we delete or de-identify your data within a reasonable period, except where we must retain it to meet legal obligations.

Security

We use technical and organizational measures to protect your data, including encryption in transit and access controls. No system is perfectly secure, but we work to keep your information safe and to limit access to what each feature requires.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To make a request, email us at hello@thecompound.tech.

Cookies

We use a small number of cookies to run the site and understand usage. See our Cookie Policy for details.

Changes

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice. The “last updated” date above reflects the current version.

Contact

Questions about your privacy? Email hello@thecompound.tech.