Privacy Policy

DivisionDesk Privacy Policy Effective: August 22, 2026 1. Scope This Privacy Policy explains how DivisionDesk handles information through the DivisionDesk website, DivisionDesk Server, customer installations, support and community services, software licensing and update services, and connected integrations. DivisionDesk is a software and service platform used by organizations to operate websites and organizational workflows. Organizations that use DivisionDesk remain responsible for the information they collect and the purposes for which they collect it. 2. Information DivisionDesk may receive DivisionDesk may receive account and administrator information such as names, email addresses, organization names and authentication records; installation information such as site URL, software versions, enabled packages, PHP/database/runtime information and last-seen activity; licensing and entitlement information; support messages and public Messenger conversations; Community posts, Feature Requests, votes and comments; diagnostic/error information; and information necessary to operate connected services. Customer organizations may use DivisionDesk modules to process membership records, documents, forms, communications, event registrations, financial records or other organization-specific information. That customer content belongs to the customer organization or its users. DivisionDesk receives only the rights necessary to host, transmit, secure, back up, troubleshoot and otherwise process that content to provide the requested service. 3. Social media and connected-service integrations When an authorized administrator connects a supported social-media or external-service account, DivisionDesk may receive account/Page identifiers, authorization data, access tokens, posts, comments, messages, analytics or other information that the provider makes available under the permissions approved by the administrator. Provider App Secrets and provider access tokens are intended to remain on DivisionDesk Server rather than on client websites where the DivisionDesk integration architecture supports centralized authorization. An administrator can disconnect an integration. The external provider may also provide its own controls to revoke access. Provider services are governed by their own privacy policies and terms. 4. How information is used DivisionDesk uses information to provide and secure the service; authenticate administrators and clients; deliver software, updates and licensed packages; operate support, Community and Feature Request services; deliver requested communications; operate integrations; diagnose failures; prevent abuse; measure service reliability; maintain audit/security records; and improve DivisionDesk features and documentation. DivisionDesk does not sell personal information. DivisionDesk does not use customer organization data to claim ownership of customer databases, rosters, documents, photographs or other customer content. 5. Cookies, sessions and technical information DivisionDesk uses necessary browser sessions, cookies or local storage for authentication, security, preferences, public conversations and similar product functions. Server logs and security controls may process IP addresses, user-agent information, request times and related technical data. Where practical, DivisionDesk stores privacy-preserving hashes rather than raw IP addresses for abuse prevention and audit functions. 6. Sharing and service providers DivisionDesk may transmit information to service providers only as reasonably necessary to provide requested functions, such as hosting, email delivery, payment processing, social-media integrations or other configured external services. DivisionDesk may also disclose information when required by law, to protect the security or rights of DivisionDesk or others, or in connection with a lawful business transfer. A customer organization's use of third-party processors is controlled by that organization. Connecting a third-party service does not make DivisionDesk responsible for that provider's independent practices. 7. Security DivisionDesk uses technical and organizational safeguards intended to protect data, including authenticated administrative access, permission controls, CSRF protection, encrypted secret storage where supported, scoped integration contracts, audit records, package integrity checks and other security controls. No online system can guarantee absolute security. Customers are responsible for protecting their administrator credentials, hosting accounts, database credentials and connected-service permissions. 8. Retention DivisionDesk retains information for as long as reasonably necessary to provide the service, meet contractual/legal obligations, maintain security/audit history, resolve disputes and operate legitimate business functions. Some records, such as retired legal-policy versions, release history, licensing history and security/audit events, may be retained longer because historical integrity is part of the service. Customer content may also be subject to the retention choices and legal obligations of the customer organization. 9. Access, correction and deletion Users should normally contact the organization that collected their information through a DivisionDesk installation because that organization controls its own operational data. Requests concerning DivisionDesk's own website, Community, Feature Requests, support records or account information may be submitted through the DivisionDesk website support/contact tools. For supported social-provider deletion workflows, DivisionDesk publishes a permanent data-deletion endpoint at https://divisiondesk.com/social-data-deletion.php and provider-specific callback endpoints where required. 10. Children DivisionDesk is an organizational software platform and is not designed as a general-purpose service directed to children. Customer organizations are responsible for determining whether and how they lawfully collect information about minors through their own activities and installations. 11. Changes to this policy DivisionDesk may update this Privacy Policy as the service changes. Material policy versions are retained through the DivisionDesk Legal & Policies system with version/effective-date history. The current effective version is published at https://divisiondesk.com/privacy.php. 12. Contact Questions about this Privacy Policy or DivisionDesk's own data practices may be submitted through the public contact/Messenger tools at https://divisiondesk.com/.