ApplyDeskPrivacy policy
Last updated 13 October 2026
ApplyDesk is an application portal for Discord communities, operated at applydesk.net. This page explains what personal data we process, why, and how you can exercise your rights under UK GDPR and the EU GDPR.
Who we are
ApplyDesk is the controller for staff accounts, billing, and the platform itself. When you apply to a community, that workspace is typically a separate controller of your answers; we process them on their behalf to run the portal.
Contact: data request form or the email you used when you applied / signed in.
What we collect
- Staff (Discord OAuth): Discord user ID, username, avatar, email, servers you can manage (to connect a workspace).
- Applicants: answers you submit, optional Discord profile and email, submitter IP (abuse prevention), and decision emails if the workspace enables them. If you sign in on the community portal, you can see your own submissions and status. Staff notes appear there only when that workspace turns the setting on.
- Billing: Stripe customer and subscription IDs for workspace owners. Card details never hit our servers.
- Usage: application metadata (status, timestamps) and optional analytics aggregates on paid plans (workspace dashboards).
- Marketing site: cookieless page views, referrers, and country on applydesk.net (Vercel Web Analytics). First-touch campaign tags (UTM /
ref) stay in session storage for that visit. Dashboard, ops, and account pages are excluded. Google Analytics 4 (cookies, IP anonymised) also runs on those marketing pages. Plausible is only loaded if it is switched on. - Sponsorship (staff dashboards): when Sponsored banners are shown, we store campaign delivery events (impressions when a banner is genuinely visible, and clicks through our redirect). Reports for sponsors are aggregated metrics. Applicant form answers are not shared with advertisers. House or test promos may link to /sponsor without billable ad events.
- Support: messages you send to support email or Discord, and data-request form submissions.
Why we process it
To provide the service (contract), keep the platform secure (legitimate interests), send transactional email the service requires (billing, application decisions, staff digests, legal notices), send optional news until you unsubscribe, and meet legal obligations including data-protection requests. We do not sell personal data.
Processors
Hosting, file storage, and marketing-site analytics (Vercel), database (Postgres), email (Resend), payments (Stripe), identity and messaging (Discord), Google Analytics 4 on the public site. Plausible only if configured. Community workspaces may also receive your application in Discord review channels.
Retention
Staff accounts last until you delete them from Account. Applications stay with the workspace until the workspace is deleted or we complete an erasure request (we strip identity and answers; anonymous application rows may remain for the community's records). Backups rotate on our host's schedule.
- Delete your staff account: Account → Delete account. You must transfer or delete workspaces you solely own first.
- Erase your application answers: Account → Erase applications, or use the data request form if you are not signed in.
- Operational metadata: product funnel events (~180 days) and Discord action logs (~90 days) are pruned by a scheduled job. That job never deletes applicant answers. Idle Free workspaces may be removed after notices (~6 weeks with no activity). Sponsorship delivery events are retained for reporting and abuse review until removed as part of ordinary operational cleanup — exact sponsor-event retention may be shortened once confirmed in the founder register.
Your rights
You can access, correct, erase, restrict, or object to processing, and (where it applies) take your data elsewhere. You can complain to the ICO (UK) or your local EU supervisory authority.
- Signed-in staff: Account settings — export JSON, unsubscribe from optional news, erase application submissions, delete the account.
- Anyone: data request form. We aim to respond within 30 days.
- Enterprise workspaces: a data processing addendum that an owner can accept in the dashboard.
We may need to confirm it's you (usually via Discord ID and the email on file). We can refuse requests that are unfounded, excessive, or that would break another person's rights.
Billing, application decisions, staff digests, new-application alerts, workspace review notices, and replies to a data request are part of running the service — we still send those. Optional news and feature broadcasts include an unsubscribe link and a one-click header for mail apps. You can also unsubscribe from this page (use the link in a news email) or from Account if you are signed in. Unsubscribing stops those optional broadcasts only; it does not delete your account or stop automated mail.
Cookies
We use a session cookie so staff stay signed in, and a short-lived cookie for applicant Discord login on a portal. Vercel Analytics does not set a cookie. Google Analytics 4 on the marketing site does. We do not use third-party advertising cookies to sell profiles. First-party Sponsored placement measurement is described in the cookie policy.
This page is a practical description of how ApplyDesk works, not legal advice. We may update it when the product changes. Related: Terms, acceptable use, refunds, cookies, security.