Privacy
policy.

MergeDesks follows data minimization. We collect the billing email needed to create and manage payments through Stripe, plus the GitHub repository permission or token needed to access the repository and deliver the requested work.

We may also receive the issue descriptions, pull request discussions, and contact messages that you intentionally submit as part of the service.

We use this information only to provide and secure the service: process billing, authenticate access, understand your engineering request, create pull requests, communicate delivery status, and maintain service reliability.

Private repository code is not shared publicly and is not used to train public AI models. Access is limited to the delivery purpose and should be revoked when the engagement ends.

Stripe processes billing information on our behalf, and GitHub provides repository access under the permissions you grant. We do not sell personal data to third parties.

We retain information only for as long as needed to operate the service, meet legal or accounting obligations, resolve disputes, and protect our systems. You may ask what data we hold and request deletion where the law allows.

Depending on your location, you may have rights to access, correct, delete, restrict, or export your personal data, object to processing, and withdraw consent where processing relies on consent. You may also contact your local data protection authority.

To exercise a right or ask a privacy question, email hello@mergedesks.com. We may need to verify your identity before responding.

We do not use invasive trackers, sell data, or build advertising profiles. We may use essential technical logs needed for security and operations.

We may update this policy as the product changes. The current version will always be published on this page with its latest update date.