Privacy Policy

Vage Digital Ventures (“NounDesk”, “we”, “us”) operates noundesk.com and the NounDesk application at app.noundesk.com. This policy explains what we do with data.

It covers two different relationships, and the difference matters:

• You, our customer. When you sign up, we decide how your account data is handled. In data-protection language we are the controller of that data.
• The devices you manage. The information that flows from your company’s Android devices belongs to you. We handle it on your instructions, as a processor. You decide what policies apply, who can see the data and when it is deleted.

What we collect

Account data

Your name, email address, company name, the role assigned to each team member, and authentication details. If you subscribe, our payment processor handles your card; we receive only the billing contact, plan, invoice history and the last four digits of the card.

Device data

For each enrolled device, the information Android reports to a device owner:

• Device identity: the name you give it, manufacturer, model, serial number, and IMEI where the device reports one.
• Operating system details: Android version and security patch date.
• Hardware and network: storage used and total, network operator, and the time the device last checked in.
• Managed apps: which apps your policy requires or allows, their versions, and whether each installed, is missing, is outdated or failed.
• Compliance state: whether the device meets the security policy you published.
• Assignment: the employee, group and policy the device belongs to.
• Location, only while a device is in lost mode. This includes a short trail of the device’s recent locations while it is in lost mode. No location is collected at any other time.

Administrator activity

Every action an administrator takes, recorded with who did it, what it affected, the result and the time. This is the audit log, and it cannot be edited or deleted.

Company documents

If you use company documents, the documents your administrators choose to share, and a record of each open showing which employee opened which document and when. Employees sign in to the Company documents app with a one-time code sent to their work email.

Website data

Standard server logs for noundesk.com, and any message you send us.

We also use Google Analytics on this marketing site to see which pages people read, but only if you accept it first. It runs on noundesk.com only: it is not used inside the NounDesk application, and it is never joined to your account or to any device data.

Cookies and your choice

The first time you visit, a banner asks whether you are happy to be counted. Until you accept, no analytics cookie is set and your browser does not contact Google at all, because we do not load the Google Analytics script until you say yes. Declining is one click, exactly like accepting.

If you accept, Google Analytics sets cookies in your browser and sends Google a record of the pages you visit, an approximate location derived from your IP address, and your device and browser type. That is the whole list. We do not run advertising, retargeting or cross-site tracking of any kind.

We remember your answer in your browser’s local storage under the name nd-cookie-consent-v1. That is the only thing we store without asking, it never leaves your device, and it exists purely so we stop asking. Clearing your browser data removes it and the banner returns.

You can change your mind at any time. Select Cookie settings in the footer of any page to bring the banner back.

What we never collect

We want this to be a short list you can read to your team:

• Call logs, phone numbers dialled, SMS or messages of any kind.
• Browsing history or search history. Website filtering sends your list of sites to Google Chrome on the device; it does not report which sites anyone visits.
• Keystrokes, screen contents or screenshots. Remote support sessions run in your own TeamViewer, AnyDesk or Splashtop account and app, not in NounDesk.
• Photos, files or documents stored on the device, or the contents of any app.
• Personal accounts or the personal side of a device.
• Location at any time other than while an administrator has placed a device in lost mode.

NounDesk manages devices, not people. If a feature would require any of the above, we will not build it.

Why we handle this data

To operate the service you asked for: to enroll devices, apply the policies you publish, install the apps you choose, show you the state of your fleet, raise alerts, produce reports, and carry out the remote actions you trigger. We also use account data to bill you, to provide support, and to send service notices.

We do not sell data. We do not share it with advertisers. We do not use your device data or your content to train machine-learning models.

Who else is involved

We use a small number of processors, and each is used only for the purpose given:

Processor	Purpose	Location
Google (Android Enterprise)	Delivering policies, apps and commands to devices	Google infrastructure
Google Analytics	Website traffic measurement on noundesk.com only, and only after you accept the cookie banner	Google infrastructure
Vercel	Hosting the website and application	United States
Supabase	Database and authentication	United States
Stripe	Subscription billing	United States
Support partner	Handling support requests during US business hours	United States

Your connection to Google’s Android Enterprise is made with your own business Google account. Google’s handling of that relationship is covered by Google’s own terms and privacy policy. Google credentials never leave our server and are never displayed in the application after the connection is made. Enrollment codes are never stored or written to logs.

Support is delivered from two places: our own team in Bengaluru, India, and a support partner in the United States. Whoever picks up your request can see your account details and the device records you are asking about, because that is what answering the question requires. Both are bound to the same confidentiality and security terms, and neither uses your data for anything but resolving your request.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

How it is protected

• Each organization’s data is isolated at the database level with row-level security, so no customer can reach another customer’s records.
• Access inside the product follows least privilege through four administrator roles, and every action is audited.
• Data is encrypted in transit and at rest by the hosting platforms.
• Destructive actions require a typed confirmation and are recorded.

No system is perfect. If a breach affects your data we will tell you without undue delay, describe what happened and what we are doing about it.

How long we keep it

Device and account data are kept while your account is active. When you close your account we delete or anonymise your data within 90 days, except where we must keep records for tax, accounting or legal reasons. The audit log is retained for the life of the account because its value depends on being complete. You can ask us to delete data sooner by writing to us.

Your rights

Depending on where you are, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. Write to us and we will respond within the period the applicable law allows.

If you carry a managed device

If your employer gave you a NounDesk-managed phone or tablet, your employer decides what is collected and why, and your rights are exercised through them. What we can tell you plainly is what the tool is capable of: it reports the device’s identity, its operating system, its installed managed apps and whether it meets your employer’s policy. It does not report your calls, your messages, your browsing or your location, except while your employer has reported the device lost.

International transfers

Our infrastructure is in the United States. If you are outside the United States, using NounDesk means your data is transferred there.

Separately from where the data is stored, it can be read from two countries. Our support team in Bengaluru accesses it from India, and our support partner accesses it from the United States. We are registered in Karnataka, India.

Where the law requires a transfer mechanism, we rely on [transfer mechanism to confirm: Standard Contractual Clauses or equivalent].

Children

NounDesk is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

We will update this page when our practices change and move the date at the top. If a change is significant we will email account owners before it takes effect.

Contact

Questions, requests or a suspected security issue: support@noundesk.com. Postal address: 84, 80ft Road, Indira Nagar, Bengaluru, Karnataka, India.