Privacy policy

Last updated 10 November 2026 · includes the Telegram bot

ZiziDesk is run by Ethan Tam in Singapore ("we"). This page explains what ZiziDesk collects, why, where it is kept and what you can do about it. Questions: contact@ethantam.dev.

What we collect

• Your account: your name, and your email if you sign in with Google. Access keys are stored only as one-way hashes.
• What you put in: projects, tasks, goals, notes, files and settings you add to ZiziDesk.
• Connections: when you connect a service (for example GitLab, GitHub, Cloudflare, Supabase, Vercel, Resend or Netlify), we store the access grant that service gives us, encrypted, and the information ZiziDesk reads with it, such as project names, commits, deployments, build results and usage numbers.
• Feedback: messages and service requests you send us, with the email address if you add one, and your browser type.
• Telegram: if you use the ZiziDesk bot (@zizideskbot), the messages you send it, your Telegram user ID and chat ID, and your display name as Telegram provides it.
• Technical logs: our hosting provider keeps short-lived request logs (such as IP addresses) for security and to stop abuse.

We do not use advertising, we do not sell or rent your data, and we do not use tracking cookies.

Why we use it

• To run ZiziDesk for you: show your dashboard, sync your devices and read your connected services.
• To answer questions you ask ZiziDesk's assistant (see "AI" below).
• To keep the service secure, fix problems and reply to your messages.

Connected services

ZiziDesk asks each service for read access wherever the service offers it, and only ever reads. Some services offer no read-only option (Netlify, Resend); ZiziDesk says so before you connect and still only reads. You can disconnect any time in Settings → Connections, which deletes our copy of the grant; the service's own settings let you revoke it on their side too.

The Telegram bot

The bot only acts for the ZiziDesk account it is linked to and ignores messages from anyone else, apart from a one-line reply when someone presses Start. What you send it is saved to your account like anything you add in the app, and recent questions are kept for 30 minutes so follow-ups make sense. The bot does not read your other Telegram chats, is not added to groups, and does not use Telegram's inline, guest, business or "secretary" features. Messages travel through Telegram, so Telegram's own privacy policy also applies to them.

AI

When you ask ZiziDesk's assistant something, the question and the parts of your ZiziDesk data needed to answer it are sent to the AI provider that answers: Mistral AI by default, or the provider you set in Settings if you bring your own. We send only what the answer needs.

Where it is kept

Your data is stored with Cloudflare (servers and databases), and feedback with Supabase. Both may process data outside Singapore. Your account's data is kept in its own separate database, apart from every other account's.

How long we keep it

As long as your account exists. When you delete your account, your data and connection grants are deleted. Feedback is kept until it has been dealt with, or deleted sooner on request.

Your choices

• See and export your data: Settings, or email us.
• Correct it: edit it in ZiziDesk, or email us.
• Delete it: Settings → Delete my account removes your account and every row of your data. You can also email us.
• Disconnect any service at any time.

We handle personal data in line with Singapore's Personal Data Protection Act (PDPA). If you are elsewhere, you can still exercise the rights above by emailing us.

Children

ZiziDesk is not meant for children under 13, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above, and tell you inside ZiziDesk if the change is significant.