RemoteDesk

Terms and remote-access security

This development distribution uses the example publisher “Example Company”. Replace the publisher and review this release's terms before commercial distribution. No claim of malware-free certification is made.

Use this software only with authorization from the owner of each computer and the people whose data you access. The application can show screen contents and, when granted, send keyboard/mouse input, clipboard text and files. Incoming attended sessions require approval. Unattended access is not enabled by these terms.

Keep access codes private. Do not approve requests from unknown people. A device ID identifies a device; it is not a password or a grant of access. TLS protects session transport; it does not make an untrusted remote operator safe.

The trial and paid license limits are validated by the platform. A trial lasts 30 days from verified registration. An extension requires administrator approval. This development build is provided for evaluation, may contain defects and does not promise availability, fitness for a particular purpose or a production service.

Privacy policy

Account registration stores your name, email, country, city, account type, applicable business information, a salted password hash, verification timestamps and terms/privacy acceptance. Verification and recovery codes are sent through the configured SMTP provider and expire after ten minutes. Existing plaintext passwords cannot be viewed by administrators.

Device registration stores a device name, certificate fingerprint, public-key identity, numeric ID, Windows/app version and last-seen time. The private device key remains protected on your Windows profile. Deleting it creates a new identity. Rebranding does not require deleting it.

The platform records sign-ins, authorizations, activity events and operational session information. Optional IP history requires account consent and is disabled by default. Approximate IP geolocation is disabled by default. If an administrator configures MaxMind GeoIP City Plus and you explicitly enable both optional IP history and approximate location in Account privacy, your public sign-in IP is sent to MaxMind over HTTPS. The platform keeps the returned country, city and accuracy radius with that sign-in. These are estimates, never your profile location or a precise address. Turning either collection setting off erases stored IP-derived locations; disabling IP history also erases saved activity IPs. No IP-location lookup is made for private or reserved addresses. MaxMind privacy policy applies to its service.

Screen pixels, files and clipboard contents are carried in the remote session; this platform does not store a screen recording. The relay transfers encrypted desktop traffic. The remote operator can still read or save the information you permit them to access. Private session notes are stored using Windows account encryption on this PC, or, when you select account storage, protected server-side under your signed-in account. Only an explicit Send a text copy action sends note contents to the remote computer through the authorized file-transfer channel; the recipient can keep that readable copy. Account note content is excluded from audit events. The platform operator controls the server protection keys; this is not end-to-end encrypted account storage.

Default activity retention is 30 days and administrative audit retention is 365 days, configurable by Super Admin within supported limits. Only authorized administrators can access platform analytics. The software does not collect unrelated files or monitor other computer activity. Contact the publisher or administrator operating your deployment for account access, corrections, retention and deletion requests.

Google reCAPTCHA is used for human verification in Production. It contacts Google's service and is subject to Google's privacy terms. SMTP and hosting providers process the information needed to deliver their services. Development has a restricted SMTP inbox containing test verification/recovery messages; it must not be used as a public production mailbox.

Return to the platform