Privacy Policy

Last revised: September 14, 2026

This Privacy Policy describes how Myrax Core GmbH ("we", "us", "our") collects, uses and discloses information about you for the website peerdesk.app and its subdomains (the "Website"), PeerDesk's AI-powered business agents, and any services, content, tools, features and functionality offered on or through our Website (collectively, the "Services").

Please read this Privacy Policy carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described herein. If you do not agree, please do not use the Services.

1. Changes to This Privacy Policy

We may modify this Privacy Policy from time to time, updating the "Last revised" date above. If we make material changes, we will use reasonable efforts to notify you. Your continued use of the Services after changes constitutes acceptance.

2. Information We Collect

Information You Provide Directly

• Account information: name, email address, and login credentials when you create an account.
• Profile information: language preferences, timezone, and other settings you configure.
• Agent configuration: business details, branding assets (logos, colors), custom rules, and services you configure for your AI agents.
• Communications: messages you send through the platform, including chat messages with AI agents and peer-to-peer communications.
• Payment information: if applicable, collected through third-party payment processors.

Information Collected Through Your Use of the Services

• Usage data: how you interact with the Services, including pages visited, features used, and actions taken.
• Device information: IP address, browser type, operating system, and device identifiers.
• Location information: approximate location based on IP address (city-level), used for analytics and visitor mapping.
• AI interaction data: prompts sent to AI agents, responses generated, tool calls made, and actions taken by agents on your behalf.

Information from Third-Party Services

If you connect third-party services (such as Google Calendar, email providers, or NullLink identity vault), we may receive information from those services as necessary to provide the Services.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Process your requests and operate AI agents on your behalf
• Translate messages between languages for multilingual communication
• Send you notifications about appointments, tasks, and agent activity
• Analyze usage patterns and improve our AI models and platform
• Ensure the safety and security of the Services
• Comply with legal obligations

4. Peer-to-Peer Communications

PeerDesk uses WebRTC technology for peer-to-peer (P2P) communications. This means:

• Direct communication: Chat messages and calls between users are transmitted directly between participants' devices.
• No server storage of P2P content: We do not store the content of your P2P messages or calls on our servers.
• Signaling data: We process connection metadata (such as room codes and peer identifiers) necessary to establish P2P connections.
• Auto-translation: If you enable multilingual translation, message text is sent to our translation service (powered by OpenAI) for processing. Translations are not stored beyond the active session.

5. AI Agent Interactions

When you interact with AI agents:

• Your messages are processed by AI language models (such as OpenAI GPT) to generate responses and take actions.
• We may log interaction data (prompts, responses, tool calls) for debugging and service improvement purposes.
• AI agents may access connected third-party services (calendars, email) on your behalf based on the permissions you grant.
• AI-generated outputs may be inaccurate. You should review important actions and not rely on agents for professional advice.

6. Zero-Knowledge Identity (NullLink)

Our NullLink identity vault uses zero-knowledge encryption:

• Your credentials are encrypted in your browser before being stored.
• We cannot access your encrypted credential data.
• Only you, with your passphrase, can decrypt your stored credentials.

7. Cookies and Tracking Technologies

We use minimal cookies and local storage for:

• Authentication: Session tokens to keep you logged in.
• Preferences: Language settings, theme preferences, and UI state.
• Analytics: Basic visitor analytics (page views, referrers, approximate location).

We do not use third-party advertising cookies or trackers.

8. Disclosure of Your Information

We may share your information with:

• AI service providers: OpenAI and similar providers for processing AI agent interactions and translations.
• Infrastructure providers: Hosting and cloud service providers who help us operate the Services.
• Third-party integrations: Services you explicitly connect (e.g., Google Calendar) to enable agent functionality.
• Legal requirements: When required by law, legal process, or to protect our rights and safety.

We do not sell your personal information to third parties.

9. Data Security

We implement reasonable security measures to protect your information, including:

• HTTPS encryption for all data in transit
• WebRTC encryption for P2P communications
• Zero-knowledge encryption for NullLink identity vault
• Role-based access controls for administrative functions

However, no system is perfectly secure. We cannot guarantee absolute security of your information.

10. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. You may request deletion of your account and associated data by contacting us.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict certain processing activities
• Export your data in a portable format

To exercise these rights, contact us at nulllink@myraxcore.com.

12. Children's Privacy

The Services are not intended for children under 18 years of age. We do not knowingly collect information from children. If we discover we have collected information from a child, we will take steps to delete it.

13. International Data Transfers

Our Services are hosted in Europe. If you access the Services from outside Europe, your information may be transferred to and processed in European countries. By using the Services, you consent to such transfer.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Myrax Core GmbH
Email: nulllink@myraxcore.com
Website: peerdesk.app