AI Rescue Desk Privacy Policy
1. The short version
- We collect only what we need to fix your one bug and get paid.
- We never ask for passwords, hosting logins, payment keys, or API keys.
- Code access is read-only, and we delete your code within 7 days of your ticket closing.
- If we find secrets in your code, we don't use or copy them. We tell you so you can rotate them.
- We never sell your data, and we never publish anything that identifies you or your code.
2. What we collect
| Data | Why |
|---|---|
| Email address | To contact you about your ticket and deliver results |
| Ticket details: tool used, expected vs. actual behavior, error messages, where it breaks, screenshots | To understand and diagnose the bug |
| Code: read-only GitHub access or an uploaded file/artifact | To find the root cause (and, for the Fix tier, prepare a pull request) |
| Your consent record | To show you agreed to our Terms and this Policy |
| Payment status and Stripe session ID | To confirm payment and process refunds. We never see or store your card number. Stripe handles payment details. |
| Your rating and feedback (optional) | To improve the service |
3. How we use it
Only to deliver your ticket, process payments and refunds, communicate with you, keep our ticket records, and improve AI Rescue Desk. We may study anonymized bug patterns (for example, "a common Lovable deploy error") for guides and site content. These never include your code, secrets, or identifying details.
4. AI-assisted processing and human review
Our team uses AI tools to read your code and draft diagnoses. A person at Profit Hawks LLC reviews every result before it's sent to you. We use trusted AI and hosting providers that are contractually barred from training on your data.
5. Secrets found in your code
If your code contains API keys, tokens, or passwords, we do not use, copy, store separately, or test with them. We use dummy values when testing. We tell you in your diagnosis which secrets look exposed so you can rotate them. Error messages and notes in our records are redacted.
6. Retention and deletion
- Code: each ticket's code lives in its own separate workspace and is deleted within 7 days of the ticket closing. We remove our collaborator access when your ticket closes, and you can revoke it anytime.
- Ticket records (email, description, status, payment and refund status, diagnosis summary): kept for 24 months for support, accounting, and refunds, then deleted or anonymized.
- Payment records: kept by Stripe under Stripe's policies, and by us as required for tax and accounting.
7. Sharing
We share data only with service providers who help us run AI Rescue Desk: Stripe (payments), Google Workspace (ticket tracking and email), GitHub (code access), and trusted AI and hosting providers that are contractually barred from training on your data. Each receives only what it needs. We don't sell or rent personal data. We may disclose information if the law requires it.
8. Security
Access is read-only and limited to the work on your ticket. Workspaces are separated per ticket, and code is deleted on the schedule above. No system is perfectly secure. If a breach affects your data, we'll notify you as the law requires.
9. Your choices and rights
You can ask us to access, correct, or delete your data, or revoke our GitHub access, at any time by emailing ken@profithawks.com. Depending on where you live (for example, the EU/UK under GDPR, or California under CCPA/CPRA), you may have additional rights.
10. Children
AI Rescue Desk is not for anyone under 18.
11. Changes
We'll post updates here and change the "Last updated" date.
12. Contact
ken@profithawks.com · 7026 Kidwelly Ln, Matthews, NC 28104