← Back to ForsetiDesk

Privacy Policy

Effective Date: June 25, 2026

Niles Technology Group LLC ("NTG", "we", "us", or "our") develops ForsetiDesk, a self-hosted IT service management platform. This Privacy Policy describes how information is collected, used, and protected when you use ForsetiDesk software, the ForsetiDesk mobile application, and our website at forsetidesk.com.

1. Self-Hosted Architecture

ForsetiDesk is a self-hosted application. Your organization installs and operates ForsetiDesk on its own infrastructure. All data entered into ForsetiDesk — including tickets, assets, user accounts, configuration items, and knowledge base articles — is stored exclusively on your organization's servers and database. NTG does not host, access, or process your operational data.

Your organization's IT administrator controls all data, user accounts, backups, and system configuration. NTG has no access to your ForsetiDesk instance unless you explicitly grant it for support purposes.

2. Information We Collect

NTG collects limited information in the following contexts:

Website (forsetidesk.com):

• Waitlist signup: name and email address, submitted voluntarily via our contact form.
• Standard web analytics: page views, referral source, browser type. No personally identifiable tracking.

License Validation:

• When a license key is installed, the software generates a machine identifier (a hash of hardware characteristics) to bind the license to a specific server. This identifier is embedded in the license key and is not transmitted to NTG.

Mobile Application:

• The ForsetiDesk mobile app connects directly to your organization's self-hosted ForsetiDesk server. All data exchanged between the app and server stays within your organization's network.
• Authentication credentials (server URL and login token) are stored securely on the device using platform-native secure storage (iOS Keychain / Android Keystore).
• Push notification tokens: When push notifications are enabled, a device token is generated by the Expo Push Notification service and stored on your organization's ForsetiDesk server. This token is used solely to deliver notifications about ticket assignments, status changes, and other ITSM events.
• The mobile app does not collect location data, contacts, photos, or any data beyond what is necessary to interact with your ForsetiDesk server.

3. Push Notifications

The ForsetiDesk mobile app uses the Expo Push Notification service, which routes notifications through Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS). Notification payloads contain minimal information — typically a title, message body, and internal reference ID. No ticket content, customer data, or sensitive information is included in push notification payloads.

Push notifications can be disabled per user by an administrator, or by the user through device notification settings.

4. Data Your Organization Controls

The following data is stored entirely on your organization's self-hosted ForsetiDesk instance. NTG has no access to it:

• User accounts and credentials (passwords are hashed with bcrypt)
• Help desk tickets, including client information and correspondence
• Asset inventory and CMDB configuration data
• Knowledge base articles and attachments
• Change requests, problems, and service requests
• Automation rules, SLA configurations, and system settings
• Audit logs and ticket history
• Organization and department structures

5. Third-Party Services

ForsetiDesk software may integrate with the following third-party services at your organization's discretion:

• SMTP email providers — for outbound ticket notifications (configured by your administrator)
• IMAP email providers — for inbound email-to-ticket conversion (configured by your administrator)
• LDAP/Active Directory — for single sign-on authentication (configured by your administrator)
• Expo Push / Firebase Cloud Messaging / Apple Push Notification service — for mobile push notifications
• Let's Encrypt — for automated TLS certificate provisioning

Each integration is optional and configured by your organization. NTG does not mandate or control any third-party service connections.

6. Data Security

ForsetiDesk incorporates security measures including:

• JWT-based authentication with 12-hour token expiry
• bcrypt password hashing with configurable salt rounds
• Role-based access control (ADMIN, MANAGER, TECH, QA, CLIENT)
• HTTPS/TLS support with self-signed or Let's Encrypt certificates
• Rate limiting on authentication endpoints
• Parameterized database queries to prevent SQL injection
• HTTP security headers via Helmet.js

As ForsetiDesk is self-hosted, the overall security of your deployment depends on your organization's infrastructure, network configuration, and operational practices.

7. Children's Privacy

ForsetiDesk is an enterprise IT service management tool. It is not directed at children under the age of 13, and we do not knowingly collect information from children under 13.

8. Data Retention

Since ForsetiDesk is self-hosted, your organization controls all data retention. Data persists in your PostgreSQL database until your administrator deletes it. NTG does not retain any of your operational data.

For our website waitlist, we retain submitted contact information until you request removal.

9. Your Rights

For data stored on your organization's ForsetiDesk instance: contact your organization's IT administrator. They have full control over all user data, including creation, modification, export, and deletion.

For data submitted to our website (waitlist): contact us at the address below to request access, correction, or deletion of your information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

Niles Technology Group LLC
Killeen, Texas
Email: info@forsetidesk.com
Web: forsetidesk.com