Dcard US Inc. (“Dcard” or “we”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, and protect information in connection with Client (your organization)’s use of EntryDesk, our AI Agent platform designed for enterprise SaaS integration and task automation.
By accessing or using EntryDesk, you agree to the practices described in this Privacy Policy.
This Privacy Policy applies to all data processed by EntryDesk in its role as an enterprise AI Agent operating under the Model Context Protocol (MCP) framework. It covers data processed via our web application, mobile application (iOS/Android), and any APIs or connected integrations.
This policy does not apply to standalone websites or services operated by third parties, including third-party SaaS applications integrated via EntryDesk.
Depending on your organization’s configuration and usage, EntryDesk may process the following categories of data on behalf of the enterprise user (“User”):
Due to EntryDesk’s architecture based on the Model Context Protocol (MCP), certain user inputs, integration references, and operational context may be temporarily stored on designated servers in order to preserve contextual continuity across AI Agent sessions. Such storage may occur on:
depending on the installation method selected by the Client.
Users may delete such temporarily stored data by removing specific AI Agent projects or using the tools and controls provided by EntryDesk for data clearing and session reset.
We do not persistently store or collect sensitive content submitted to or returned by the AI Agent, unless explicitly configured by the Client for auditing or compliance purposes.
We process personal or operational data for the following purposes:
We do not use Customer Data for advertising, profiling, or model training.
Based on the MCP framework, EntryDesk may, during the execution of specific AI Agent projects, organize and retain user input information in a contextualized form to improve the quality, relevance, and continuity of AI-driven responses. This contextual memory is scoped to the specific project or task and is retained only as necessary to fulfill its intended operational purpose.
Operational logs and metadata (e.g., task status, workflow triggers, execution history) are also retained for the period required to support service delivery, diagnostics, and customer support, unless a longer retention is mandated by law or specifically requested by the Customer.
Transient data (e.g., in-session prompts and outputs unrelated to project-level context) are processed in memory and are not stored persistently by default.
Client may configure data retention rules, including the duration and scope of contextual memory, through EntryDesk’s admin console.
Security procedures are in place to protect the confidentiality of your data, including Google user data and other sensitive information:
We implement industry-standard security measures to protect your data, including:
Client shall be responsible for securing their internal access credentials and properly configuring integration scopes.
In the course of using EntryDesk, Users may choose to integrate or utilize third-party services such as external SaaS platforms (e.g., Google Workspace, Slack) or large language model (LLM) providers (e.g., OpenAI, Anthropic, or other compute service providers). These third-party service providers may, as necessary to fulfill their functionality, including data processing, inference, or response generation, store or use certain information submitted or accessed via EntryDesk, including but not limited to prompts, contextual data, and operational inputs.
If any such information includes personal data, the handling, storage, and protection of that data is governed solely by the privacy policies and terms of service of the respective third-party providers. Dcard shall not be responsible for any processing, retention, or misuse of data by such third parties.
Users are solely responsible for reviewing and agreeing to the applicable terms of service and privacy policies of any third-party services before enabling their integration or use within EntryDesk.
We may disclose personal data when required by law or to protect rights and safety:
We may share personal data for other purposes when you give us explicit consent or direct us to do so as part of using EntryDesk’s features.
Any transfer, storage, or processing of personal data across jurisdictions will be handled in accordance with the personal data protection laws applicable in the jurisdiction where Dcard is established, including implementing appropriate safeguards as required by such laws.
To the extent required by applicable laws, Users may have the right to:
All such requests shall be directed through the Client, who serves as the data controller under this Policy.
As a User using EntryDesk, you are responsible for:
We may update this Privacy Policy from time to time to reflect changes in technology, law, or our practices. When we do, we will revise the “Effective Date” at the top and notify enterprise administrators through the EntryDesk platform or via email.
If you have questions about this Privacy Policy or our data handling practices, please contact:
Our team is happy to discuss how EntryDesk handles and protects your data.
Contact Us →