Privacy · last updated 22 August 2026
What we hold, and what we do with it
Written to be read rather than to be complied with. This describes what rosiedesk.com actually does with data — not a template borrowed from someone else's product. If anything below is unclear, that is our fault and we would like to know: support@rosiedesk.com.
Conversations
The messages Rosie handles, so she can hold a thread and so you can read it back. They stay in your own WhatsApp too, because it is your number.
Bookings
The service, time, price and postcode for jobs booked through us. We do not know about jobs you took by phone, which is why you confirm each one.
Never
No card or bank details, ever. Rosie tells customers not to send them, and payment is handled entirely by Stripe on their own pages.
Who we are, and which hat we are wearing
rosiedesk.com provides Rosie. Two different relationships run at once, and they carry different duties:
Your business name, your first name, your email address, your service list and prices, your subscription status. We decide how that is handled, so the responsibility is ours.
When someone messages you and Rosie replies, that conversation is your data about your customer. You are the controller; we process it on your instructions and for no purpose of our own.
Contact for any privacy question, including a rights request: support@rosiedesk.com.
What we hold, why, and on what basis
Business name, your first name, your email, your services and prices. Needed to run the service you signed up for — the lawful basis is performance of our contract with you. Your prices are the only thing Rosie is permitted to quote from, so they are not optional.
The message transcript, and whatever the customer volunteered: their name, an email address or phone number, the service they asked about, a postcode, and when they wanted it. Held so Rosie can answer sensibly and so the lead reaches you. Processed on your behalf.
Service, time, price and the customer's identifier for jobs arranged through us, plus whether you confirmed or declined.
Your subscription status, the period you have paid for, and Stripe's identifiers for you. We never see or hold a card number. Basis: contract, and legal obligation for the records HMRC requires us to keep.
A single-use link sent to your email, and a signed session cookie afterwards. Sign-in is by link alone, so there is no password to hold.
When Rosie hands a question to you instead of answering it, we note that it happened. It is how we show the service works as described.
Who else touches it
Four, and no others. We do not sell data, and we do not share it with anyone not on this list.
Hosting, storage and email delivery. Your records are held in Western Europe.
Powers the wording of Rosie's replies. Message content is sent there so she can answer. Under their commercial terms it is not used to train models.
Takes the payment. Card details go to Stripe directly from Stripe's own hosted page and never pass through us.
Carries WhatsApp messages, when you use that channel. Their terms apply to that carriage and we are not affiliated with them.
Anthropic and Stripe process data outside the UK. Those transfers rely on the standard safeguards in their data processing terms.
How long
We keep your account, rate card, conversations and bookings for as long as you are using Rosie. We do not currently run an automatic deletion schedule, and we would rather say so than print a retention table we do not enforce.
Ask us to delete what we hold and we will do it, and confirm, within one month.
Kept for six years after the transaction, because tax law requires it. That obligation outlasts a deletion request.
The commitments
Not to advertisers, not to other trades, not to anyone. It is not a product we offer and it never will be.
Rosie only ever replies to someone who messaged you first. We never start a conversation for our own reasons, and we never contact your customers on our own behalf.
Neither your conversations nor your customers' are used to train models.
Rosie actively steers customers away from sending them, and there is no field anywhere on our site that accepts one.
Cancel and your number, your WhatsApp app and your chat history are untouched, because they were never ours.
Automated replies, and where a human decides
Rosie writes replies automatically. Every figure she gives comes from your own rate card. She places a hold and asks you before a booking is confirmed, and it is your tap that decides. Nothing here makes a decision about a person that produces a legal or similarly significant effect on them without a human involved.
Cookies
This marketing site sets none at all. The pages are plain documents: nothing measures you, follows you, or needs your consent. Signed in to your account, one cookie holds your session so you do not have to sign in on every page. It is strictly necessary and does nothing else.
Your rights
Under UK GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, object to processing we do on the basis of our own legitimate interests, and ask for your data in a portable form. Email support@rosiedesk.com and we will action it within one month.
Service messages about your own account — a quota warning, a receipt — are part of the contract and cannot be switched off while the account is open. Anything that nudges you to upgrade can be, and every one of those carries a way to do it.
If we get it wrong, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.
Changes
If this changes in a way that affects you, we will email you rather than quietly reprint the page. The date at the top always reflects the current version.
Not affiliated with WhatsApp or Meta. Messages travel over the WhatsApp Business Platform and Meta's own terms apply to that carriage.