Privacy Policy

VeltroDesk is workplace software published by BTSFXPRO Information Technology Consultants Co. L.L.C (“we”), registered in the United Arab Emirates. It is used by staff of an organisation that has bought a workspace. It is not a consumer service and nobody can sign up to it from the app or this website — an administrator at your employer creates your account.

That matters for this policy. Your employer decides what work data goes into their workspace and how long it is kept; they are the controller of it. We host and process it on their instructions. Questions about what is stored about you at work belong to your employer. Questions about how we handle it belong to us, at [email protected].

Your account

Name, work email address, job title, department, profile photo if you upload one, and the workspace and role your administrator gave you.

Work you do in the app

Leads, contacts, companies, deals and the notes and follow-ups on them; tasks and projects; chat messages and files you send; posts and comments; calendar events; files you upload to Drive. This is your employer’s business record, entered by you or by colleagues.

Attendance

The times you clock in and out and the breaks you take, so your hours can be counted. The app does not track your location, and no version of it ever has.

Calls and WhatsApp

When your workspace uses VeltroDesk’s phone line, we store the call log (number, direction, duration, time, and the agent), and, where your employer has switched recording on, the recording and its transcript. Business WhatsApp conversations between your workspace and its customers are stored the same way. Your personal calls and your personal WhatsApp are not touched: the app has no access to the phone’s call log, SMS, or contacts.

Your device, for notifications

A Firebase Cloud Messaging registration token, the platform, and the app version. The token is an address for this install and nothing else — it is how a message, a call or a reminder reaches your phone. It is deleted when you sign out or turn notifications off in Settings → Notifications, and when the app is uninstalled Google reports the address as dead and we remove it.

Security records

Sign-in times, the IP address a sign-in came from, and access tokens issued to your devices — so you and your administrator can see who is signed in and revoke a device that is lost.

• Notifications — to deliver messages, calls and reminders. Refusing it leaves the rest of the app working.
• Camera — only when you choose “Camera” to attach a photo. Nothing is captured in the background.
• Microphone — for voice notes and for calls placed or answered in the app.
• Phone (call state, phone numbers, manage own calls) — required by Android before an app may run its own calls through the system dialler. VeltroDesk does not read your call history and does not become your default phone app.

The app does not request access to your photo library, your contacts, your location, or an advertising ID, and it contains no advertising or third-party analytics SDK.

We do not sell data and we do not share it for advertising. It reaches:

• Your colleagues, to the extent your employer’s role settings allow.
• Twilio — telephony and WhatsApp Business. Calls and business messages pass through Twilio to be delivered at all.
• Google (Firebase Cloud Messaging) — the device token and the text of a notification, in order to deliver it.
• Our hosting provider, where the workspace runs.
• Anyone we are legally required to disclose to.

Data is stored on servers in Europe and transmitted over TLS. Passwords are hashed and never stored in a readable form. Work records are kept for as long as your employer keeps their workspace; when a workspace is closed its data is deleted. Device push tokens and access tokens are removed as soon as they stop being used.

• Notifications — Settings → Notifications in the app, or Android’s own notification settings.
• Sign a device out — Settings → Security lists every device holding an access token, and any of them can be revoked.
• Access, correction, deletion — see Deleting your account.

VeltroDesk is for people in employment. It is not directed at children and we do not knowingly hold data about anyone under 18.

When this policy changes we update the date at the top, and where the change is material we tell workspace administrators.

BTSFXPRO Information Technology Consultants Co. L.L.C
[email protected]
+971 50 931 3789