Version: 2026-09-22-paid-privacy-v2
This policy covers the website, dashboard and Windows advertising app. DeskYield is operated by Abhinav Shrivastava under the DeskYield trade name. Privacy contact: support@deskyield.tech. Correspondence address: Gokuldham Society, Rajnandgaon, Chhattisgarh 491441, India.
1. Accounts, hosting and payment providers
DeskYield uses Clerk authentication and AWS Mumbai for account preferences, advertiser creatives, payment references, ad-delivery records and financial ledger entries. Razorpay processes payment details in its hosted checkout. DeskYield does not collect card credentials in its own forms. Infrastructure and authentication providers may process operational data outside India under their policies.
2. Country and chosen interests
Advertising geography uses the country estimated server-side from the request IP using DB-IP; it is not GPS and VPNs or corporate networks can change it. A saved home-country preference cannot override the detected country. Interests are selected by the user, not inferred from screen or browsing contents.
3. Delivery records, connections and restricted admin access
No screenshots, app contents, browser history, other app names, typed text, clipboard, microphone or camera are needed for earning. Native visibility, elapsed time, device/session references and account/creative identifiers are used for delivery and fraud checks. After accepting this privacy version, signed-in app connection heartbeats record connection duration and last activity for service and payout/fraud review. Connection time is not verified ad viewing and does not create rewards. Only the most recent server-observed connection IP is kept in separate encrypted storage; it is hidden from the admin view seven days after the last observation and scheduled for automatic storage expiration. Cloud deletion can complete after the expiration time. Historical IPs are not added to the financial ledger. Authorized administrators using recent MFA can review account names, verified viewing, earnings and connection details; IP access is audited without copying the IP into the audit log. IP addresses can be shared or changed by networks and are not proof of identity. Financial events retain payment/order/campaign and confirmed bank-transfer references, amounts, policy versions and audit history; advertisers see aggregate minutes, viewers and clicks, not individual earnings.
4. Previews, optional reports and privacy requests
Public campaign previews use published creatives without creating a guest earning identity. Optional device-health reporting remains separate and off unless enabled. Contact support@deskyield.tech for privacy requests. Required financial, fraud and legal records may be retained while other eligible data is deleted.
5. Information you provide
Account providers process sign-in details such as name, email, identifiers and authentication status. DeskYield processes preferences, selected interests, optional home country and account records to provide the service. Advertisers supply business details, authority declarations, creative text/media, destinations, categories, dates and budgets. We use support messages and attachments to investigate requests.
Razorpay collects payment details through its checkout. We receive references and results needed for billing, reconciliation and disputes. Public withdrawals and international checkout are not enabled; additional identity, tax or payout information will be explained before an enabled process requests it.
6. Local checks and audience matching
Earning uses visibility and timing signals, not screenshots, typed content or browsing history. Other-app identities are not uploaded for targeting. A separate optional local suggestion experiment, where available and enabled for a session, can recognise a limited developer-app allowlist on the device. Its observations stay in temporary local memory, clear on exit or opt-out, and do not change paid matching or earnings.
DB-IP country data is used locally on our server. We do not send your IP to a DB-IP lookup service for each request. A country estimate is not GPS or proof of identity and can be affected by VPNs, mobile carriers and corporate networks.
7. Providers and creative review
| Service | Role |
|---|---|
| Clerk and your selected sign-in provider | Authentication and account security |
| AWS | API, Mumbai database/storage, operational and security services |
| AWS Bedrock Guardrails | Checks of submitted advertiser text, destination/category information and supported PNG images |
| AWS GuardDuty | Malware checks of creative uploads |
| Netlify | Public website hosting and delivery |
| Razorpay | Current India advertiser checkout and payment processing |
| DB-IP country dataset | Server-side approximate country lookup |
Authorized operators can inspect advertiser material. Video may need human content review; malware scanning does not establish that a video’s content or destination is appropriate. Viewer screen contents and separate viewer identities are not sent to the creative-review model. Controlled operations may also use a local malware-scanning tool. Authentication/hosting services may use their own security and abuse-protection providers.
Information may be disclosed to service providers, professional advisers or authorities as needed to operate the service, meet legal duties, investigate fraud/security incidents or resolve disputes. Advertisers receive aggregate campaign reports, not a directory of viewers, their IPs or individual earnings. We do not sell viewer personal information to advertisers.
8. Cookies and optional diagnostics
Necessary session/security storage supports sign-in and account actions. Blocking it can prevent those features. Optional device-health reports are off unless enabled and can include app/Windows versions, aggregate visibility totals and bounded error categories. They are separate from the delivery and financial records required for the service. Staying connected does not itself earn rewards.
9. Retention
The seven-day connection-IP limit above does not apply to every infrastructure or authentication log. Operational logs may be retained for up to 180 days; separate security/audit and legally required records may last longer. Database backups currently have a retention window of up to 35 days, and older object versions can remain temporarily after changes. Cloud expiry is not a promise of instantaneous deletion.
Account, campaign and financial records are retained for service, reconciliation, fraud, tax, legal and dispute needs. Uninstalling or signing out does not delete an account or its financial history. Deletion requests are assessed against the records involved and continuing obligations; we explain material limits where required. Providers may have their own required retention periods.
10. Choices, requests and age
You can change preferences, pause ads, disable optional reports, sign out or uninstall. Email support@deskyield.tech for access, correction, deletion, withdrawal of optional consent or information about processing. Identify the account without sending passwords. Proportionate identity verification may be needed. Required records may remain after an account closes.
The service is intended for adults aged 18 or over. Contact us if you believe a child has submitted information. Infrastructure and authentication providers may process operational data outside India. We use encrypted connections, access controls and restricted administration; no system can guarantee absolute security.
11. Updates and contact
Material policy changes are published and new acceptance is requested where applicable. This expanded explanation describes current processing; it does not enable new collection, payments or withdrawals. Contact the operator and grievance contact with a privacy concern.