Privacy Policy

• You own your data. We never sell it.
• We use your data only to operate Apron Desk for you.
• We log access for security and support.
• You can export your data at any time, and ask us to delete it.
• We use a small set of named sub-processors for hosting, payments, email, AI, error tracking, analytics, and maps (all listed below).
• Email us at privacy@aprondesk.com for anything privacy-related.

Apron Desk is operated by Mitryxa, Los Angeles, California, USA. Mitryxa is the data controller for the personal data described in this policy, and is the party you are contracting with. Charges appear on your statement as Mitryxa.

Privacy questions go to privacy@aprondesk.com.

Account information. Your name, email address, and authentication tokens. We never see your password: magic-link sign-in means there isn't one.

Business data you upload. Contacts, events, proposals, invoices, menu items, vendors, staff records, file attachments, and everything else you put into Apron Desk. This is your data.

Usage logs. IP address, browser, the actions you take in the app, and timestamps. Used for security audit log, debugging, and product improvement.

Payment information. Handled by our payment processor, Stripe. We store only Stripe customer and payment reference IDs. We never see or store your card number.

Communications. Emails you send through Apron Desk are stored in your audit log so you can see what went out and to whom.

Voice notes. When you record a voice note, the audio is sent to OpenAI to turn it into text. We keep the recording for 30 days, then a nightly job deletes it. The transcript and the changes it made stay with the event.

• To provide the Service (run your calendar, send proposals, etc.)
• To bill you correctly
• To respond to support tickets
• To send transactional emails (magic links, receipts, alerts)
• To investigate security incidents
• To improve the product (in aggregate, never selling identifiable data)

We do not use your business data to train AI models.

When you use Maître (our AI team member), your prompts and the relevant context from your data are sent to Anthropic, our AI infrastructure provider. Voice-note audio goes to OpenAI for transcription. Under their commercial API terms, these providers do not use your data to train their models.

Conversation history is stored in your account so Maître has memory across sessions. You can delete a conversation from the Maître conversation list.

We rely on a small number of audited third-party services to run Apron Desk:

• Vercel: application hosting; serves the site to your browser
• Supabase: database, authentication, and file storage
• Stripe: payment processing for subscriptions and client deposits
• Resend: outbound transactional and customer-facing email
• Anthropic: AI infrastructure powering Maître
• OpenAI: voice-note transcription (audio in, text out)
• Sentry: error tracking; records a sample of app sessions, with all text and media masked, so we can fix what broke
• PostHog: product analytics inside the signed-in app; we send a user ID and workspace ID so we can see which features get used
• Google Analytics 4 and Microsoft Clarity: visitor analytics on the public website (see “Cookies and analytics” below)
• Mapbox: calendar map view and dispatch map
• Documenso: e-signature, if you enable it
• Intuit QuickBooks: accounting sync, if you enable it
• Mailchimp: marketing list export, if you enable it

Cookies and analytics. On the public website (not the signed-in app) we use Google Analytics 4 for visit counts and traffic sources, and Microsoft Clarity for heatmaps and session replay. If your browser’s time zone is in Europe, these stay off until you accept them in the cookie banner. Inside the signed-in app we use PostHog, as listed above.

If we add or replace a sub-processor we’ll update this list. Email privacy@aprondesk.com to be notified of changes in advance for a compliance review.

We don't sell your data. We share it only:

• With sub-processors above, to operate the Service
• With your team members you've invited
• With your clients via the portal links you share
• If required by law (subpoena, court order)
• In a business transaction (acquisition), and you'll be notified first

You can:

• Download your data as a single JSON file from Settings → Privacy & data
• Ask us to permanently delete your account by emailing privacy@aprondesk.com
• Request access to or correction of your personal data
• Object to processing or request a portable copy (GDPR Article 20)

Email privacy@aprondesk.com for any of these requests. We respond within 30 days.

California residents have additional rights under the CCPA, including the right to know what we've collected and the right to opt out of any sale (we don't sell).

All data is encrypted at rest and in transit (TLS 1.3). Access to production data is limited to a small set of platform administrators and logged in the admin audit trail.

We strongly recommend you use a unique email and modern device for accessing Apron Desk. Magic-link authentication eliminates password risk but session tokens still need to be protected.

We keep your business data while your account is active. Cancelling your plan does not delete it, so you can come back. To have it permanently deleted, email privacy@aprondesk.com and we will delete it, except records we are legally required to keep (for example, payment records for tax compliance).

Audit logs are kept for as long as your account exists.

Voice-note recordings are deleted 30 days after they are made.

We're based in the United States and our infrastructure runs in US-East (Virginia). If you're in the EU, UK, or another jurisdiction, your data is transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) for these transfers.

Apron Desk is not for children. We do not knowingly collect data from anyone under 16. If you believe a child has signed up, email us and we'll delete their account.

We'll post material changes here and email you at least 14 days before they take effect.

Privacy questions: privacy@aprondesk.com
Anything else: hello@aprondesk.com or visit our contact page.