Privacy Policy
Effective October 25, 2026
ProdDesk is software for commercial production companies: contacts, follow-ups, pitches, reels, budgets, projects and calendars. This policy explains what ProdDesk collects, how it's used and the choices you have. "We" means ProdDesk. Questions go to hello@useheard.io.
What we collect
- Your account. Your name, email address, title and password. The password is stored only as a one-way hash. If you sign in with Google, Google sends us your name, email address and Google account ID. We never see your Google password.
- What your team adds. A workspace holds what you and your teammates put in it: contacts and companies, notes, follow-ups, deals, pitches, reels, budgets, projects, crew details, files, stills and videos. Your company controls this content. We hold it to run ProdDesk for you.
- People who view what you send. When someone opens a pitch page or reel you shared, we record what they open, play, comment on or download, with the time, their IP address and browser details, so you can see who watched what.
- Technical logs. Errors, request times and similar records that keep ProdDesk working and secure.
- Cookies. One cookie keeps you signed in. A short-lived one protects Google sign-in. We don't use advertising or tracking cookies.
Google data
If you connect your Google account:
- Sign in with Google gives us your name, email address and Google account ID. We use them only to sign you in.
- Google Drive works through Google's own file picker with the
drive.filepermission, so ProdDesk can open only the files and folders you choose. Videos and stills you choose are copied into ProdDesk's storage so they play quickly. Other files you add are saved as links. Spreadsheets you import are read once to bring the rows in. An Excel file is converted through a temporary Google Sheet in your Drive, which ProdDesk moves to the trash right after. - Access tokens. We don't store your Google access tokens. When a copy needs one, it's used for that copy and then discarded.
ProdDesk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We don't sell Google user data, use it for advertising, or use it to develop, improve or train AI or machine learning models. People at ProdDesk don't read it unless you ask us for help with something, it's needed for security, or the law requires it.
You can remove ProdDesk's access to your Google account at any time at myaccount.google.com/permissions.
How we use information
- To run ProdDesk for you: show your workspace, open drafts in your email app, play your videos, and show who viewed your pitches and reels.
- To write drafts when you ask. ProdDesk sends the details a draft needs (for example a contact's name and your notes) to an AI provider (Anthropic's Claude, through Vercel's AI Gateway) to write it. We don't use your content to train AI models.
- To keep ProdDesk secure and working: preventing abuse and fixing errors.
- To contact you about your account, such as password resets or important changes.
We don't sell personal information and we don't show ads.
Who we share it with
Only the service providers that run ProdDesk for us, and only as needed: hosting (Vercel and Railway), file and video storage (Railway's storage, provided by Tigris), AI drafting (Vercel AI Gateway and Anthropic) and email delivery if your workspace turns it on. People you send a pitch page or reel link to can see what's on it. We may disclose information if the law requires it or to protect someone's safety. If ProdDesk is sold or merged, information moves with it under this policy.
How long we keep it
- Workspace content stays until you delete it or close the workspace. Deleted items stay in the trash for 60 days so they can be restored, then they're removed.
- A video no longer used by any spot is deleted after 7 days (60 days if its spot is in the trash). Unfinished uploads are cleared after 6 hours.
- Viewer activity on pitch pages and reels stays with your workspace until you delete it.
- To get a copy of your data, or to delete your account or a workspace, email hello@useheard.io. Admins can also export a workspace from Settings, Data.
Security
Passwords are stored as one-way hashes, connections use HTTPS, and a workspace's content is available only to its members. No system is perfectly secure. If you find a problem, tell us at hello@useheard.io.
Your choices
You can update your profile in Settings, turn Google sign-in on or off, remove Drive files from records, and ask us for a copy of your data or to delete it.
Children
ProdDesk is for businesses and isn't meant for anyone under 16.
Changes
If we change this policy, we'll update the date at the top. For significant changes we'll tell account owners in the app or by email first.