Terms and privacy.

Privacy

Short version: we hold as little as the desk can work with, we do not sell shop data, and you can delete the whole account from inside the app. The long version is the rest of this page.

What we collect

Your sign-in, if you sign in. Google returns your email address, your name and your profile picture through the Stinger sign-in gate, and we keep those with an account id. We never see or store your Google password. We keep the tokens that connection issues, encrypted. Each signed-in session records its expiry, the IP address it came from and the browser that made it, so a session can be ended. Your seat row holds the account id, the plan and whether you are on the waitlist.

Boards you save to the seat. Boards live in this browser. One goes to the server only when you save it to your signed-in seat, and then we hold the artwork itself: shapes, type, colours and any image you placed.

Proofs, and what your customers write on them. A proof link stores the board, the job name, the shop name, the decision, and the note and pins the person reviewing it leaves. Those notes come from a third party, your customer, not from you. Anyone holding the link can read the job and pin a note; the token is the whole key. Do not put an SSN on a proof.

Usage events. Every Annabelle or Imagine call writes a stinger.usage.v1 event: the provider, the model, token counts, the cost in dollars, and optionally a seat and shop id. No board content, no prompt text. Events stay in this browser and are posted to Desk's own /api/v1/usage, which keeps the last two hundred in memory and writes them to no database. Press Clear log on the Usage page and this browser's copy is gone.

Who else sees it

xAI. When you ask Annabelle for a layout, copy or a font match, or ask Imagine for a still, we send that request to xAI's API: your prompt, a summary of the board, and, when the desk has one, a picture of the board. This is sharing with a third party and we count it as such. Nothing goes to xAI unless you ask Annabelle or Imagine for something.

Desk's model catalogue also prices models from Anthropic, OpenAI and Google. Today only xAI is wired up, and nothing is sent to the other three. If that changes, this page changes first.

Google. Google runs the sign-in you chose, so Google knows you signed into Desk. Typefaces are self-hosted: the font files ship with the app itself, so no font request leaves your browser for anyone.

Pexels. When you search stock photos, that search term goes to Pexels through our server; your browser never talks to Pexels directly. Nothing goes to Pexels unless you search.

The people we run on. Our hosting and database providers store the rows above on our behalf, under contract, and use them for nothing else.

That is the whole list. We do not sell shop data. We do not trade it, rent it or hand it to a data broker. We do not train a model on your stills. Stinger runs no training of any kind, on your artwork or anything else.

No analytics, no advertising, no tracking

There is no analytics SDK in Desk and no advertising SDK. No pixel, no tag manager, no crash reporter, no attribution kit. We do not build a profile of you, we do not follow you onto other apps or sites, and we have nothing to hand an advertiser. Apple's “data used to track you” is empty for Desk, which is why the app never asks for tracking permission.

How long we keep it

Saved boards, your seat and your proof links stay until you delete them or delete the account. Sessions expire on their own. Usage events are a two-hundred-event ring in memory that a restart empties.

Deleting your account

Sign in, open Account (the same panel is on the Billing page) and choose Delete account. It tells you exactly what will go, makes you type DELETE, and then removes, in one shot and permanently:

• your sign-in: email, name, picture and the Google connection;
• every session, with the IP address and browser recorded on it;
• every board saved to the seat;
• the seat itself: plan and status;
• every proof link you own, with the notes and pins your customers left on it. Anyone still holding one of those links will see “That proof link is dead.” That includes proofs a customer has not decided yet: we will not let a third party hold your deletion open.

It is one database statement, so it either all happens or none of it does. There is no half-deleted account. It cannot be undone, there is no grace period, and signing back in with the same Google account gives you a new, empty one.

Two things it does not reach. Boards kept only in this browser never left your machine, so clear them on the desk or clear the site data. Proof links made while signed out carry no owner, so we cannot prove they are yours and will not touch them. Send us the link and we will delete it.

No account, or cannot get into one? Write ohhbeehave35@gmail.com from the address you signed in with and we will do it for you. That address is also how you ask what we hold about you, or ask us to correct it.

Children

Desk is a tool for print shops. It is not directed to children, and it is not for anyone under 13. We do not knowingly collect anything from a child under 13. Sign-in runs through Google, and we ask for no age, no school and no family information. If you believe a child under 13 has made an account, write ohhbeehave35@gmail.com and we will delete it and the data on it.

Reaching us

ohhbeehave35@gmail.com, or Stinger Industries, Port Salerno, FL. The house, not a bot and not a ticket mill. If this page changes in a way that matters, the effective date at the top moves.