Data Protection & Security FAQ
Answers to the key questions about how Partner Desk by Creators United FZC LLC protects your data.
Last updated: September 1, 2026
Your agency's data is your property. Partner Desk by Creators United FZC LLC is built with a security-first approach, and we are committed to transparency about how your data is handled, stored, and protected.
1. Is my data encrypted?
Yes — both in transit and at rest. All data transmitted between your browser and Partner Desk is encrypted using TLS 1.2 or higher. Data stored in our database and file storage is encrypted at rest using AES-256, the same encryption standard used by banks and government agencies.
This means that even if an unauthorised party were to gain access to our storage systems, your data would remain unreadable without the decryption keys.
2. Where is my data stored?
Your data is stored on Supabase, a managed PostgreSQL database service hosted on cloud infrastructure. Database records, file uploads, and authentication data all reside on these secure servers. Backups are maintained with point-in-time recovery capability.
We do not store copies of your data in any secondary locations outside of our sub-processor infrastructure.
3. Who can access my data?
Only you and your authorised team members. Access to your agency's data is controlled by Row Level Security (RLS) policies at the database level. This means that even within our infrastructure, your data is isolated from other agencies by design.
A small number of Partner Desk by Creators United FZC LLC engineers may access data only when required for support, maintenance, or security investigation, and only with explicit authorisation. All access is logged and auditable.
Suppliers you invite have access only to their own bookings and profile — never to your other agency data.
4. How do AI features handle my data?
Partner Desk offers optional AI-assisted features for proposal and social content generation. When you use these features, the content you submit is sent to Google Gemini for processing.
- No model training: Your data is never used to train the AI provider's models.
- Limited retention: The AI provider may retain processed data for up to 30 days for safety and abuse prevention, after which it is automatically deleted.
- Opt-in only: AI features are completely optional. You can use the full platform without ever engaging them.
- No cross-customer data sharing: Your AI prompts and results are never shared with other agencies or used to inform other customers' outputs.
6. How do I delete my data?
You can request data deletion at any time by contacting us at support@partnerdesk365.com. Upon receiving your request:
- Your data is removed from production systems within 30 days
- Residual copies in backups are purged within 90 days
- You will receive a confirmation email once deletion is complete
If you cancel your subscription without an explicit deletion request, your data is automatically deleted 60 days after the end of your billing cycle.
7. Can I export my data?
Yes. You can export your agency's data at any time. Contact our support team at support@partnerdesk365.com and we will provide a complete export of your data in a structured format (CSV/JSON). We aim to deliver exports within 7 business days.
8. What happens in a data breach?
In the unlikely event of a security breach, Partner Desk by Creators United FZC LLC will:
- Immediately investigate and contain the breach
- Notify all affected agencies within 72 hours of discovery, in accordance with best practices
- Provide a detailed report of what data was affected and the steps taken to remediate
- Take corrective action to prevent similar incidents
9. Compliance & certifications
Partner Desk by Creators United FZC LLC follows industry best practices for data protection. Our infrastructure provider (Supabase) maintains SOC 2 Type II compliance and is GDPR-ready. We align our practices with:
- UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2022)
- GDPR principles (data minimisation, purpose limitation, storage limitation)
- CCPA (California Consumer Privacy Act) principles for US-based users
- ISO 27001 information security management principles
10. How are passwords protected?
Passwords are never stored in plain text. They are hashed using bcrypt, a one-way cryptographic hashing algorithm designed specifically for passwords. Even our team cannot see your password — we can only reset it. We enforce a minimum password length of 8 characters and recommend using a unique password.
11. Backups & data recovery
Your data is backed up continuously with point-in-time recovery for up to 7 days. This means we can restore your data to any specific moment within the past week if needed. Long-term backups are retained for 30 days. All backups are encrypted and stored in geographically separated facilities.
12. Sub-processors
We use the following trusted sub-processors to operate the platform. Each is bound by data protection agreements:
- Supabase — database, authentication, file storage
- Resend — transactional email delivery
- Stripe — payment processing
- Google Cloud / Gemini API — AI-assisted features
We will notify you at least 30 days before adding or changing a sub-processor that processes your data.
13. Contact
For data protection questions or requests, contact us at:
Partner Desk by Creators United FZC LLC
Email: support@partnerdesk365.com
For all data protection inquiries