IRISDESK
Privacy
Last updated October 6, 2026
How IrisDesk handles data
IrisDesk is a remote desktop product from Iris Buddy Inc. Incoming access requires approval on the receiving computer or password access previously enabled by its owner. Viewing, control, clipboard exchange, file transfer, computer audio, and IrisDesk's built-in recording are separate permissions.
Connection service
The IrisDesk connection service processes device addresses, cryptographic public keys, IP addresses, connection timing, session identifiers, signed consent decisions, and WebRTC connection metadata needed to authenticate devices, route requests, establish peer connections, prevent abuse, and operate the service. It does not receive screen frames, computer audio, clipboard text, transferred-file contents, or built-in recording files as application content. When a direct connection is unavailable, encrypted WebRTC traffic can pass through the IrisDesk TURN relay.
Accounts and subscriptions
When you create an IrisDesk account, we store your email address, an account identifier, email-verification status, and a salted password hash. We store hashed sign-in, verification, and password-reset tokens with expiry dates. Your password is not stored as plain text. If you save contact details, we also store your name, company, telephone number and address in your account profile. These optional details can be edited or cleared in the account portal. Email delivery uses Hostinger to send verification and password-reset messages.
PayPal processes subscription payments. IrisDesk stores the PayPal subscription identifier, selected plan, payment status, and entitlement dates to verify access. Card and bank-account details are handled by PayPal rather than stored by IrisDesk. A sandbox checkout is testing only and does not create a paid production entitlement.
Connection reservations and account identifiers are used to enforce session duration and simultaneous-connection limits when account enforcement is enabled. We do not use account or connection data for advertising or cross-app tracking.
On your computer
Each installation stores its private device key and recent-device list using operating-system protected storage. Optional saved remote-access passwords and account session credentials also use operating-system protected storage. Local audit records contain session events and enabled permissions; they do not contain screen frames, computer audio, clipboard text, transferred-file contents, or recordings. Built-in recordings are saved only to the location chosen on the viewing computer.
Operating-system permissions
macOS or Windows controls screen recording, accessibility or input control, local-network access, and system-audio capture. IrisDesk cannot grant these permissions itself. You can change them in system settings.
Your choices
You can decline any request or capability, end a session at any time, forget a saved device, disable start at login, and remove locally saved recordings and audit records.
Account data requests
Contact support@irisdesk.org from your account email to request access to or deletion of your account data. We verify ownership before acting. Subscription renewal must also be cancelled; deleting a local app does not cancel a PayPal subscription. Records needed to resolve payment disputes or meet applicable recordkeeping obligations may need to be retained.
Contact
For privacy or support questions, email support@irisdesk.org or visit Iris Buddy Inc..