Privacy Policy
This policy explains what personal data is processed when you use DeskManager, the desktop application and MCP (Model Context Protocol) connector developed by Protime, and when you connect it to an AI assistant such as Claude. It is written to be read in five minutes; if anything is unclear, contact us at the address in section 10.
1. Who we are
Protime is an independent software studio based in Italy. Protime is the data controller for the data described in section 4 (licensing, device registration, updates, notifications). For everything that happens on your own computer (section 3), you are in control: Protime does not receive that data.
2. What DeskManager is, in one paragraph
DeskManager is an application you install on your own Windows PC. It runs an MCP server on that PC and exposes it through an encrypted tunnel at a private address unique to your machine (for example mcp-xxxxxxxx.protime.it). An AI assistant you authorise can then, through that address, read and write files, run commands, control a browser, and read your email on your machine, under your account, with the permissions you grant. Nothing is executed on Protime's servers.
3. Data that stays on your computer (and never reaches Protime)
When you or your AI assistant use DeskManager's tools, the following data is processed only on your PC and travels directly between the AI assistant and your PC through the encrypted tunnel. Protime does not receive, store, or have access to it:
- File contents, directory listings, and files you read, write, move or trash;
- Terminal commands and their output;
- Web page content, screenshots, form data, cookies and browser logs from the built-in browser or, if you explicitly enable it, from your own Chrome via the DeskManager browser extension;
- Email contents, if you configure an email account inside DeskManager (credentials are stored locally on your PC only);
- Desktop screenshots and UI element data used for software automation.
The AI assistant you connect (for example Claude, operated by Anthropic) receives this data as part of your conversation. Its handling of that data is governed by that provider's own privacy policy, not by this one.
4. Data that Protime's servers process
To provide licensing, updates and optional notifications, Protime's server (server.protime.it) processes the following:
| Data | Purpose | Retention |
|---|---|---|
| Licence key, plan, expiry, activation status, and the customer email you gave when purchasing | Verify that your subscription is active; send licence tokens by email on request | Duration of the subscription plus 12 months, then deleted or anonymised |
| Device identifier, computer name, DeskManager build number, tunnel hostname and tunnel credentials | Register your PC, route your private tunnel, tell you when an update is available | Until you remove the device or the licence expires, plus 12 months |
| Update checks (build number, timestamp) | Serve the correct update | Rolling logs, 90 days |
| Telegram chat identifier (only if you link Telegram) | Deliver the notifications and files you ask DeskManager to send you | Until you unlink Telegram |
| Messages and files you send to yourself via Telegram through DeskManager | Relay to Telegram | Transient: forwarded immediately, not kept after delivery |
| Technical error reports (application logs, no file contents) | Fix bugs | 90 days |
Protime does not sell personal data, does not use it for advertising, and does not share it with third parties except the processors listed in section 6.
5. OAuth authorisation and tokens
When you connect DeskManager to an AI assistant, the assistant registers as an OAuth client with your DeskManager instance and you approve the connection on your own PC. The resulting access token is issued by your PC, stored by the AI assistant, and can be revoked at any time from the DeskManager dashboard. Protime's servers are not involved in issuing or storing these tokens.
6. Processors and transport
- Cloudflare, Inc. — provides the encrypted tunnel and DNS that make your PC reachable at its private address. Cloudflare transports traffic; it does not store its contents.
- Telegram — only if you link it, to deliver notifications you request.
- Email provider — to send licence emails.
7. Security
- All traffic between the AI assistant and your PC is encrypted in transit (TLS).
- Authorisation uses OAuth 2.1 with PKCE; every tool is annotated as read-only or destructive so the AI assistant can apply its own safeguards.
- Destructive operations (permanent deletion, killing processes, elevated commands) require explicit confirmation; deletions go to the Recycle Bin by default; a configurable security level blocks dangerous commands.
- Access to your own Chrome browser requires a separate extension that you install and can disable at any time.
8. Children
DeskManager is a professional tool and is not intended for, or knowingly offered to, anyone under 16.
9. Your rights
Under the GDPR you may request access to, correction of, or deletion of the data in section 4, object to or restrict its processing, and receive a copy in a portable format. You may also lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali). To exercise these rights, write to the address below; we answer within 30 days.
10. Contact
Subject line suggestion: "DeskManager privacy request"
11. Changes
We will post any change to this policy on this page and update the date at the top. Material changes will also be announced inside the DeskManager application.