Skip to content
Legal & privacy
Draft policyReviewed 25 September 2026

Privacy policy

A clear view of how information moves through Gatherdesk, from your first enquiry to your business workspace.

Draft for review. Registered company details, public contact information and final policies are still being confirmed. These pages describe the current product and proposed policies; they are not final legal terms.

01Who this notice is for

Gatherdesk is operated by MKweb communication company, based in Morocco and serving international customers. This draft covers visitors to the Gatherdesk website, people requesting a demo or trial, and users of a Gatherdesk workspace. The operator’s registered details, postal address and privacy contact still need to be confirmed for publication.

A business using Gatherdesk decides what customer information it puts in its workspace and how it uses that information. If you contact a business through its website chat, or appear in its customer records, ask that business about its privacy practices. The operator and each business must confirm their respective data protection responsibilities in their service agreement.

02Information the product handles

The information depends on the features you use and what your business enables.

  • Demo and trial requests: your name, work email, business name, business type, team size, request type, optional website and notes, and a record of your request and permission to be contacted about it.
  • Workspace access: account and profile details, password verification information, roles, permissions and session records.
  • Business records: contacts, enquiries, work or bookings, notes, files, invoices and payment records entered by authorised users. Labels and available services vary by business type.
  • Connected email and website chat: messages, attachments where supported, sender details, chat identity details when requested, and the conversation history needed for the team to respond.
  • Operational information: request and error information, security events, network addresses used for abuse controls, and browser storage used for sign-in and form continuity.

03How information is used

Submitted demo and trial details are saved for platform staff to review and follow up. Sending the form does not book a meeting, open a paid account or subscribe you to a marketing newsletter.

Within a workspace, information supports the features the business chooses: managing customer relationships, routing and claiming enquiries, communicating with customers, preparing work and financial documents, and administering access and subscriptions. Operational information helps investigate errors and limit misuse.

The applicable legal grounds for each purpose still need to be confirmed under Morocco’s Law 09-08 and the rules of the international markets served. The contact permission on the enquiry form relates to that request; it is not blanket permission for unrelated uses.

04Access, integrations and AI

Workspace records are available to users according to their server-enforced permissions. Public demo and trial requests are reviewed in the platform operator’s request inbox. A workspace’s connected email provider also handles email sent or received through that connection.

If a business configures an AI provider and uses an AI feature, the relevant prompt and content are sent to its selected provider: OpenAI or Anthropic. Website chat assistance can include recent conversation messages and the business information supplied by the administrator. Staff drafting can include relevant enquiry or work details. The selected provider’s terms and account settings also apply; this notice makes no promise about that provider’s retention or model training practices.

Production hosting providers, any other subprocessors, processing countries and transfer arrangements are not yet confirmed in this draft. These details must be published before launch. A business should not enable an integration for sensitive information without assessing whether the arrangement is appropriate.

05Storage and retention

The demo and trial form keeps an unfinished draft in the current browser tab so you can move between steps. Drafts older than 24 hours are not restored. A successful submission clears the draft and keeps a small confirmation receipt in that tab. This does not delete the submitted request from the server.

Signing out clears the corresponding browser authentication token and profile. Website chat keeps a visitor session identifier in the tab; access to a visitor conversation expires after 24 hours. Session expiry is not automatic deletion of the stored conversation.

Server retention periods, backup deletion, workspace closure and erasure procedures are not yet finalised. No automatic server deletion period is promised by this draft. These procedures need to be confirmed before this notice becomes final.

06Your choices and requests

You can choose not to submit an enquiry and can leave its optional fields blank. Information requested as required is needed to process that enquiry. Avoid including passwords, payment card details, medical records or other sensitive information in the public request form or a general chat.

Morocco’s Law 09-08 provides rights relating to information, access, correction and objection, subject to its conditions. You can raise a data protection concern with Morocco’s CNDP. Where EU, UK or other privacy laws apply to your circumstances, additional rights may include erasure, portability, restriction and withdrawal of consent. These rights are subject to the applicable conditions and legal retention requirements.

For records held by a business using Gatherdesk, contact that business first. For Gatherdesk’s own enquiry or account records, use the operator contact once published. A verified public privacy contact is currently missing; this draft does not yet provide a complete rights-request channel.

07International customers

Gatherdesk is intended for businesses in Morocco and internationally. Being available online does not mean that every country’s rules apply in the same way. EU GDPR, UK data protection law and other local rules need to be assessed against the customers served and the processing involved.

The final notice and service arrangements must identify the relevant providers, processing locations and safeguards for cross-border transfers, including any required Moroccan CNDP formalities. This draft does not claim approval, certification or compliance with every jurisdiction.

08Updates to this notice

This version describes the product reviewed on the date shown. It is a draft pending the operator’s details and final operating practices. Material changes to data use should be reflected in the final notice and communicated where required.