Privacy policy

Last updated 10 November 2026

ZiziDesk is run by Ethan Tam in Singapore ("we"). This page explains what ZiziDesk collects, why, where it is kept and what you can do about it. Questions: contact@ethantam.dev.

What we collect

• Your account: your name, and your email if you sign in with Google. Access keys are stored only as one-way hashes.
• What you put in: projects, tasks, goals, notes, files and settings you add to ZiziDesk.
• Connections: when you connect a service (for example GitLab, GitHub, Cloudflare, Supabase, Vercel, Resend or Netlify), we store the access grant that service gives us, encrypted, and the information ZiziDesk reads with it, such as project names, commits, deployments, build results and usage numbers.
• Feedback: messages and service requests you send us, with the email address if you add one, and your browser type.
• Technical logs: our hosting provider keeps short-lived request logs (such as IP addresses) for security and to stop abuse.

We do not use advertising, we do not sell or rent your data, and we do not use tracking cookies.

Why we use it

• To run ZiziDesk for you: show your dashboard, sync your devices and read your connected services.
• To answer questions you ask ZiziDesk's assistant (see "AI" below).
• To keep the service secure, fix problems and reply to your messages.

Connected services

ZiziDesk asks each service for read access wherever the service offers it, and only ever reads. Some services offer no read-only option (Netlify, Resend); ZiziDesk says so before you connect and still only reads. You can disconnect any time in Settings → Connections, which deletes our copy of the grant; the service's own settings let you revoke it on their side too.

AI

When you ask ZiziDesk's assistant something, the question and the parts of your ZiziDesk data needed to answer it are sent to the AI provider that answers: Mistral AI by default, or the provider you set in Settings if you bring your own. We send only what the answer needs.

Where it is kept

Your data is stored with Cloudflare (servers and databases), and feedback with Supabase. Both may process data outside Singapore. Your account's data is kept in its own separate database, apart from every other account's.

How long we keep it

As long as your account exists. When you delete your account, your data and connection grants are deleted. Feedback is kept until it has been dealt with, or deleted sooner on request.

Your choices

• See and export your data: Settings, or email us.
• Correct it: edit it in ZiziDesk, or email us.
• Delete it: Settings → Delete my account removes your account and every row of your data. You can also email us.
• Disconnect any service at any time.

We handle personal data in line with Singapore's Personal Data Protection Act (PDPA). If you are elsewhere, you can still exercise the rights above by emailing us.

Children

ZiziDesk is not meant for children under 13, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above, and tell you inside ZiziDesk if the change is significant.