Privacy Policy

Last updated: 26 April 2026

This Privacy Policy explains how TalkyTools ("we", "our", "us") collects, uses, discloses, and safeguards information when you use GiftDesk (the "Service"). GiftDesk is a B2B SaaS for FNP's internal corporate gifting teams and their authorised clients. By using the Service, you agree to the practices described here.

1. Information we collect

• Account data: name, work email, hashed password, and (if you sign in with Google) your Google account profile.
• Gmail send authorisation (optional): when you opt in, an OAuth refresh token scoped to https://www.googleapis.com/auth/gmail.send is stored encrypted at rest. This token only allows GiftDesk to send emails on your behalf — it does not read your inbox.
• Client & deal data you enter: client names, companies, emails, presentation titles, product selections, email subjects/bodies you compose. Each sales user's data is private to that user (and to FNP super admins).
• Vendor & product catalogue: data the procurement team enters about gift suppliers and their pricing.
• FNP product page snapshots: when you paste an fnp.com URL, we fetch and store the public product title, image URL, price, and SKU shown on that page.
• Usage data: pages visited, presentations generated, emails sent, IP address, browser, device.

2. How we use it

• To operate, secure, and improve GiftDesk.
• To generate the personalised PowerPoint catalogue you request and to send it via your authorised Gmail account.
• To respond to support requests.
• For internal analytics (aggregated, not personally identifying).

3. Sharing

We do not sell your data. We share it only with:

• Service providers (AWS hosting, Google for OAuth + Gmail API, fnp.com for product page fetches) under contractual data-protection terms.
• Authorities when legally required.
• FNP super admins within your own organisation, for support and audit. Sales-team data remains private to the owner and super admins — not to other sales users.

4. Data retention

Account & usage data is retained while your account is active and for up to 90 days after deletion. Generated PPT files are kept until the linked presentation record is deleted.

5. Your rights

You can request access, correction, deletion, or export of your data by emailing support@giftdesk.com. You can also revoke GiftDesk's access to your Google account at any time via Google Account → Security → Third-party access.

6. Security

We use HTTPS in transit, hashed passwords (bcrypt), encrypted OAuth tokens at rest, and per-user data isolation. No system is 100% secure — please use strong passwords and don't share credentials.

7. Children

GiftDesk is a B2B tool for FNP staff and their corporate clients, not intended for children under 13.

8. International transfers

GiftDesk is operated from India on AWS Mumbai (ap-south-1). Some sub-processors (Google Workspace) may process data outside India.

9. Changes to this policy

We may update this Privacy Policy. Material changes will be announced in-app and via email at least 30 days before they take effect.

10. Contact

Questions? Reach us at support@giftdesk.com.

TalkyTools, India.