Morning Desk CRM Privacy Policy
Effective Sep 30, 2026 ·
1. Who we are and what this covers
This Privacy Policy explains how Morning Desk CRM ("Morning Desk," "we," "us") collects, uses and shares personal information. It covers our website, the Morning Desk web application at app.morningdeskcrm.com, and related services (the "Service"). We do not sell personal information, and we do not use it for targeted advertising.
Morning Desk CRM
1200 N Federal Hwy, Suite 300
Boca Raton, FL 33432
hello@morningdeskcrm.com
Our two roles
For account and billing information about our customers and their users, Morning Desk decides how the information is used (we are the "controller" or "business").
For Customer Data, which is the contacts, companies, deals, emails, invoices and other content our customers put into or connect to the Service, we process it on our customer's behalf and under their instructions (we are the "processor" or "service provider"). If your information is in a Morning Desk customer's CRM, for example because you are one of their clients or leads, please contact that customer first. We will help them respond to your request.
Client portal users. Our customers can invite their own clients to a Morning Desk client portal. If you use one, the business that invited you controls what is in it, and we process it for them as their service provider. We also use your sign-in details ourselves to run and secure your login.
2. Information we collect
Category
Examples
Source
Account information
Name, email address, password or sign-in credentials, company name, role
You, when you sign up or are invited
Billing information
Billing name and email, subscription and seat history, last four digits and expiry of your card
You, through Stripe. Stripe collects and stores your full card details; we never see or store them
Customer Data
Contacts, companies, deals, projects, tasks, notes, invoices, bills, payments and files you enter or import
You and your Members
Email data (if you connect Gmail)
Messages, headers, recipients, attachment metadata and threads in your connected mailbox; emails you send through the Service
Google, with your permission
Calendar data
Events, attendees, and the private link your calendar app uses to subscribe to your Morning Desk calendar
You and your Members
Scheduling settings (if you turn on client booking)
The hours you take calls, your time zone, call length, booking limits and meeting link; the calls clients book with you
You, and the clients who book
Client portal information
A portal user's name, email and password; the messages, files and call bookings they send; when they last signed in; invoices they view or pay
The portal user and the business that invited them
Connected payment accounts (if you connect Stripe)
Your Stripe account ID and data about invoices and payments you create through Morning Desk
Stripe, with your permission
Company enrichment (if you connect Apollo.io)
Public company details such as industry, size and logo, matched to companies in your CRM
Apollo.io, using your own Apollo account
AI usage
Prompts, the records an AI feature is run on, AI output, and credit usage
You, when you use AI features
Usage and device data
IP address, browser and device type, pages viewed, actions taken, log and error data
Automatically, when you use the Service
Communications
Messages you send us and support requests
You
Cookies
We use cookies and similar technologies that are needed to sign you in, keep your session secure, and remember basic preferences. We do not use advertising cookies or cross-site tracking. You can block cookies in your browser, but the app will not work without the essential ones.
Sensitive information
Do not put protected health information (PHI), government ID numbers, full payment card or bank account numbers, or similar sensitive data into Morning Desk unless we have signed a written agreement with you that covers it, such as a HIPAA business associate agreement.
3. How we use information
We use personal information to:
provide, run and maintain the Service, including syncing email, sending messages and invoices you ask us to send, and showing your data to the Members you authorize, and running the client portals and call booking you offer your clients
process subscriptions, trials, seat changes and payments, and send receipts and billing notices
run the AI features you use, such as drafting replies, summarizing accounts and preparing your daily brief
secure the Service, prevent fraud and abuse, and enforce usage limits and our Terms of Use
provide support and send service messages, such as security alerts, trial reminders and changes to our terms
understand how the Service is used so we can fix problems and improve it, using aggregated or de-identified data where possible
meet legal obligations and respond to lawful requests
We do not sell personal information. We do not share it for cross-context behavioral advertising, and we do not use Customer Data to advertise to anyone.
AI processing
When you use an AI feature, we send the relevant records and your request to our AI model provider to generate a response. We use AI providers under terms that prohibit them from using your data to train their models. AI output is saved in your Workspace only when a feature needs it, such as a cached daily brief.
Google user data (Limited Use)
Morning Desk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
We use Gmail data only to provide and improve the user-facing email features of the Service that you choose to use: viewing your inbox, syncing messages to related records, and sending email you compose.
We do not use Gmail data for advertising, and we do not sell it.
We do not transfer Gmail data to others except as needed to provide those features, to comply with the law, for security, or as part of a merger or acquisition with notice to you.
We do not allow humans to read your Gmail data unless you give us permission for specific messages, it is needed for security or to comply with the law, or the data is aggregated and anonymized for internal operations.
We do not use Gmail data to develop, improve or train generalized AI or machine-learning models. When you use an AI feature on an email, the message is sent to our AI provider only to produce your response.
4. How we share information
We share personal information only as described here.
Service providers
We use these providers to run the Service. They may process personal information only on our behalf and under contract.
Provider
What they do for us
Supabase
Database, authentication and file storage
Vercel
Application hosting and delivery
Stripe
Subscription billing and payment processing; connected-account payments you choose to enable
Resend
Delivery of the emails the Service sends: invitations, sign-in and password links, notifications, booking confirmations and invoices
Gmail integration you choose to connect
Anthropic
AI model provider for AI features
Apollo.io
Company data enrichment you choose to connect; we send it the company names and web domains you ask to enrich
Squarespace
Hosting of our marketing website
We may add or replace providers as the Service changes. We will update this list when we do.
Inside your Workspace
Customer Data is visible to the Members of your Workspace according to their roles and settings. Your connected mailbox is visible only to you.
Client portals and call booking
When a customer invites you to their client portal, you see only what they share with your company: projects, sent invoices, files marked for you, your message thread and open call times. Your messages, uploads and bookings go to that customer's team. When you book a call, we add it to the team member's Morning Desk calendar and email a confirmation to both of you.
Calendar subscriptions
If you subscribe to your Morning Desk calendar from Google Calendar, Outlook or Apple Calendar, that app reads your events through a private link. Anyone who has the link can see those events, so keep it private. You can replace the link at any time.
Invoice recipients
When you send an invoice, the recipients you choose get the invoice details. Anyone with the invoice's private link can view it without logging in. Client portal users at the invoiced company can also view and pay it in their portal.
Legal and safety
We may disclose information if we believe in good faith that it is required by law, subpoena or court order, or needed to protect the rights, property or safety of Morning Desk, our customers or others.
Business transfers
If Morning Desk is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that deal. This Policy will continue to protect it.
With your direction
We share information with other parties when you direct us to, for example when you connect a third-party service.
5. Retention, security and your rights
Retention
We keep account and Customer Data for as long as your Workspace is active. After a subscription ends, we keep Customer Data for at least 30 days so you can come back or ask for an export, and we may delete it after that. Billing records are kept as long as tax and accounting laws require. If you disconnect Gmail, we stop syncing new messages; you can ask us to delete messages already synced. When a business removes your client portal access, you can no longer sign in to its portal; your messages, files and bookings stay in that business's Workspace as part of its records. Deleted data is removed from backups on our normal backup cycle.
Security
We protect information with encryption in transit and at rest, access controls that separate each Workspace's data, least-privilege access for our staff, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.
Your rights and choices
Depending on where you live, you may have the right to:
know what personal information we hold about you and get a copy
correct inaccurate information
delete your information
get your information in a portable format
object to or restrict certain processing, or withdraw consent where we rely on it
opt out of the sale or sharing of personal information and targeted advertising (we do neither)
not be discriminated against for exercising these rights
To make a request, email hello@morningdeskcrm.com. We will verify your identity before acting and respond within the time the law requires. An authorized agent may make a request for you with proof of authority. If we deny your request, you may appeal by replying to our decision. If you are in the EEA or the UK, you may also complain to your local data protection authority.
You can update most account information in the app, disconnect Gmail, Stripe or Apollo.io at any time, turn client booking off, and unsubscribe from non-essential emails using the link in them. Service messages about your account, billing and security will still be sent.
Legal bases (EEA and UK)
Where GDPR applies, we process personal information to perform our contract with you, for our legitimate interests in running and securing the Service, to meet legal obligations, and with your consent where required, for example when you connect Gmail.
International transfers
Morning Desk is based in the United States, and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
Children
The Service is for businesses and is not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
Changes to this Policy
We may update this Policy. If a change is material, we will notify you by email or in the app before it takes effect. The effective date at the top shows when it was last changed.
Contact
Questions about this Policy or your information:
Morning Desk CRM
1200 N Federal Hwy, Suite 300
Boca Raton, FL 33432
hello@morningdeskcrm.com