Legal
Privacy Policy
This Policy is provided by Ultimate Quantum LLC. Please read it fully; it explains what Local Desk collects, why, who processes it, and the choices you have.
1. Who we are
Local Desk (localdesk.news) is operated by Ultimate Quantum LLC ("Ultimate Quantum", "we", "us"), a Wyoming limited liability company. We are the controller of the personal data described here. Contact: privacy@localdesk.news.
2. What we collect
- Account data. Your email address, password hash, role, and the sign-in and password-setup tokens we issue.
- Organization data. The desk's name, members and their roles, presets (city, region, radius, timezone, brand name, presenter and sponsor settings), and connected publishing accounts (platform, account identifier and the tokens or app passwords needed to publish on your behalf).
- Uploads. Logos, backgrounds, sponsor logos and other media you upload.
- Job settings and run outputs. Job schedules, research results and their sources, verification results, storyboards and scripts, your approve/reject decisions, generated audio and video, captions, post copy, publishing results, quality-check results and the public edition page for each run.
- Usage and billing data. Credit reservations and consumption per run, plan and subscription status, Stripe customer and subscription identifiers, and invoice and payment events sent to us by Stripe. We do not receive or store full card numbers.
- Audit logs. A record of significant actions in the Service (for example sign-ups, sign-ins, approvals, billing changes, member changes) with the acting user, organization, action and time.
- Security data. IP addresses and request metadata used to throttle sign-up, sign-in, password-reset and contact requests and to detect abuse; server logs of requests and errors.
- Custom package requests. The name, email, organization, volume, platforms and message you send through the Custom Packages form.
- Notifications. Subscription-payment notices go to your organization's administrator email addresses. Operational alerts go to Ultimate Quantum operator addresses, not to destinations you configure.
3. Why we use it
- To provide the Service: research, verify, produce, check and publish editions; host edition pages; bill you; send transactional email and alerts.
- To keep the Service secure: authenticate you, throttle abusive traffic, investigate incidents and keep audit records.
- To improve the Service: aggregate calibration and quality metrics from review outcomes and QA results. We do not sell personal data and do not use your data to advertise to you.
- To respond to your requests, including Custom Package enquiries and support.
- To meet legal obligations, including tax and accounting records.
Where the GDPR or similar law applies, our legal bases are performance of a contract (providing the Service), legitimate interests (security, improvement, business communications), legal obligation, and consent where we ask for it.
4. Processors and other recipients
We use the following providers to run the Service. Each receives only what its function requires.
| Provider | Purpose | Data involved |
|---|---|---|
| Stripe | Payments, subscriptions, customer portal | Email, organization name, billing details, payment method (held by Stripe), invoices |
| OpenAI | Hosted web search research, verification, script and copy generation, transcription for QA, text-to-speech when the OpenAI voice is selected | Preset location and settings, research text, scripts, generated audio/video for checking |
| Microsoft Edge text-to-speech | Narration with the default voice | Narration text |
| OpenStreetMap Nominatim | Geocoding story locations | Place names from stories |
| Pexels | Stock footage and images | Search terms derived from stories |
| Protoface | Fictional AI presenter video synthesis | Licensed presenter portrait image, narration audio and presenter settings |
| Creator | Publishing to connected platforms and delivery status | Connected-account identifiers and tokens, finished video, captions, post copy |
| Google Cloud | Hosting, storage and databases | All Service data |
| Resend | Transactional email (setup links, alerts, receipts) | Email addresses and message content |
| SignalWire | SMS alerts, if configured | Phone numbers and message content |
Publishing platforms you connect (for example YouTube, TikTok, Instagram, Facebook, X, LinkedIn) receive the editions and copy you publish under their own privacy policies. We may also disclose data to professional advisers, to a successor in a merger or sale, or where required by law or to protect rights and safety. Some providers process data in the United States and other countries; where required we rely on standard contractual clauses or equivalent safeguards.
5. Public content
Editions you publish, and their public edition pages (title, narration, stories, source links, media credits and links to the published posts), are public by design. Do not include personal data in presets, brand names or sponsor material that you do not intend to publish.
6. Cookies
The Service sets one cookie: a session cookie that keeps you signed in to the app. It is marked HttpOnly and, in production, Secure and SameSite. We do not use advertising or third-party analytics cookies on localdesk.news. The marketing site loads fonts from Google Fonts, which may log the request to its servers under Google's privacy policy.
7. Retention
- Account and organization data: for as long as the account exists, then deleted within 90 days of account deletion, except as noted below.
- Run outputs, uploads and edition pages: while the account exists. Uploads you delete are removed at once; run outputs and edition pages are removed with the account. To delete your account, email privacy@localdesk.news from an administrator address. Copies already published to platforms remain under your control there.
- Billing records and audit logs: up to seven years where required for tax, accounting and dispute purposes.
- Security logs and IP addresses used for throttling: up to 90 days.
- Custom package requests: until the enquiry is closed and for up to two years afterwards for follow-up.
8. Security
We protect data with encryption in transit (HTTPS), hashed passwords, expiring sign-in and setup tokens, per-organization access checks, request throttling, restricted administrative access and audit logging. Connected-account credentials are stored only as needed to publish on your behalf. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.
9. Your rights and requests
Depending on where you live, you may have rights to access, correct, export, restrict or delete your personal data, to object to certain processing, and to withdraw consent. Administrators can update account and organization data in the app and can cancel subscriptions through the billing page. For other requests, including account deletion or a copy of your data, email privacy@localdesk.news from the address on the account. We will respond within 30 days. You may also complain to your local data-protection authority.
We do not sell or share personal data for cross-context behavioural advertising, and we do not discriminate against you for exercising your rights.
10. Children
The Service is for adults. You must be 18 or older to create an account. We do not knowingly collect personal data from anyone under 18; if you believe we have, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy. For material changes we will notify administrators by email or in the Service at least 14 days before they take effect. The effective date at the top shows the current version.
12. Contact
Ultimate Quantum LLC · ultimatequantum.ai · privacy@localdesk.news