Last updated: 3 November 2026
Questions? info@gptelevate.com
1. Who is responsible
DeskHub247 is an online service offered under the trading name DeskHub247. It is not currently a UK limited company. For enquiries about the service, the legal operator or data protection, contact info@gptelevate.com. The operator's full legal identity and a valid address for formal correspondence must be added to this policy before it can be treated as a complete UK trader disclosure. The proposed future registered office at 71–75 Shelton Street, London is not the current trading address.
For our own platform accounts, payments, security and business communications, the DeskHub247 operator acts as a data controller. For customer enquiries handled on behalf of a subscribed business, that business normally determines the purpose of processing and DeskHub247 acts as its processor. The business must provide its own customer privacy information.
2. Information we receive
Account and business information can include email address, login identifiers, business name and type, services, service area, contact information, subscription status and settings you choose. We also process technical security logs, service diagnostics and approximate usage figures.
When a visitor chats with a participating business, the conversation may include messages, a name, telephone number, availability or requested callback details, service requirements and other information the visitor chooses to share. The business may view resulting enquiries and conversation summaries in its dashboard, and may receive configured email or WhatsApp alerts.
3. Why we use data and lawful bases
We use account data to create and operate accounts, deliver the services requested, manage billing and support (contractual necessity); to protect systems, investigate abuse and improve reliability (legitimate interests); and to comply with tax, accounting or legal obligations (legal obligation). Optional marketing requires an appropriate lawful basis and an unsubscribe mechanism.
The participating business is responsible for choosing and explaining the lawful basis for collecting visitors' enquiry information. DeskHub247 processes such information to deliver the contracted enquiry-handling service and according to the business's instructions.
4. Service providers and sharing
We use service providers to operate DeskHub247, including Supabase and Lovable (software and hosting), Cloudflare (network and security), OpenAI API (AI-generated replies), Whop (subscription checkout and payments), Resend (email where enabled) and Meta (WhatsApp owner alerts where enabled). We share only information required to provide the relevant service. Providers have their own applicable terms and data practices.
We do not sell customer enquiry content. We do not promise that platform messages are private from the business receiving them: the relevant business owner may view and act on the enquiry.
5. International processing
Service providers may process personal data outside the United Kingdom, including in countries with different privacy laws. Where international-transfer protections are required by applicable law, the relevant contractual and legal safeguards must be assessed and applied. Contact info@gptelevate.com for details of processing locations and safeguards.
As DeskHub247 currently operates from outside the UK and serves UK businesses, the applicability of UK GDPR and any UK representative requirements need to be assessed. We do not imply that a planned future UK registered-office address fulfils these requirements.
6. Retention and deletion
We retain account and enquiry information while necessary to operate the service, maintain security, resolve issues, and comply with legal or accounting obligations. When accounts close, data is deleted or anonymised when no longer needed, subject to lawful retention and technical backups. For access or deletion requests contact info@gptelevate.com. Any announced free-account expiry period is subject to the actual implemented account rules.
7. Individual rights
Subject to applicable law, individuals may request access, correction, erasure, restriction, objection or portability of their personal data. Where processing relies on consent, consent may be withdrawn. Individuals may complain to the UK Information Commissioner's Office (ico.org.uk) if UK data protection law applies.
If you contacted a business through its assistant, that business is normally your first point of contact about its enquiry. For DeskHub247 account data or privacy questions, contact info@gptelevate.com. We may need to confirm your identity before responding to a request.
8. Security, AI and changes
We use authenticated accounts, organisation-level access controls and other technical safeguards. No online service can promise zero risk. Assistant responses are generated by AI, can be inaccurate and may form part of the saved conversation. We do not intend to make solely automated decisions with legal or similarly significant effects on individuals through the enquiry assistant.
We may update this policy when features, suppliers or legal requirements change and will provide appropriate notice for material changes. Do not include passwords, payment-card details, medical records or unnecessary sensitive information in enquiry chats.