Secure remote desktop access and connections

Privacy Notice and Information Governance

Welcome to RustDesk. Safeguarding your confidential information is of paramount importance to our organization. This Privacy Notice articulates our stringent protocols regarding the acquisition, processing, stewardship, and safeguarding of personally identifiable information collected through our digital landing page and specialized service interfaces. Effective as of 10-02-2026, this governance framework aligns comprehensively with evolving data protection statutes, regulatory benchmarks, and prominent commercial compliance directives, including mandates relevant to digital advertising ecosystems and consumer privacy rights. By interacting with our service infrastructure, you acknowledge and accept the data handling practices detailed within this governance document.

Categories of Information Collected

In the course of delivering high-performance remote desktop solutions, RustDesk acquires various categories of data to optimize functionality, ensure platform security, and deliver seamless user experiences. The specific information we gather depends on your direct interactions with our landing page and service offerings:

• Directly Provided Data: Information entered willingly via our web interfaces, including full names, corporate email addresses, telephone numbers (074793745), organizational affiliations, and specific service inquiry details.
• Automatically Logged Data: Technical identifiers collected passively during your browsing session, such as Internet Protocol (IP) addresses, browser type, operating system version, referring uniform resource locators, page navigation paths, and aggregate timestamp metrics.
• Transactional and Support Data: Records corresponding to service requests, customer support tickets, billing inquiries, and feedback submissions submitted through our designated communication channels ([email protected]).

Purposes of Data Processing Operations

The acquisition and subsequent manipulation of your data are strictly bound to explicit, legitimate business objectives. We refrain from utilizing collected information for incompatible secondary operations. Primary purposes governing our processing workflows encompass:

• Provision, administration, and continuous enhancement of our core remote desktop services and landing page features.
• Execution of contractual obligations, processing service requests, and managing customer account lifecycles.
• Fulfilling internal analytical evaluations, auditing system performance, troubleshooting technical anomalies, and refining user interface architecture.
• Communicating administrative updates, security alerts, transactional notifications, and marketing communications where appropriate consent has been established.
• Complying with applicable legal obligations, resolving regulatory disputes, and enforcing our binding terms of service.

Legal Bases for Processing Personal Information

Our organization processes personal data under clearly established statutory justifications. Depending on the specific context of interaction, our processing activities rely upon:

• User Consent: Explicit, affirmative, and freely given consent for specific marketing and non-essential analytical tracking activities.
• Contractual Necessity: Processing required to initiate, maintain, or fulfill a service agreement between the user and RustDesk.
• Legitimate Business Interests: Pursuing our commercial objectives to secure network infrastructure, prevent fraudulent activities, and improve service delivery, provided such interests do not override fundamental consumer privacy rights.
• Legal Obligations: Adherence to mandatory statutory, tax, or regulatory compliance mandates imposed by governing authorities.

Data Retention Schedules and Lifecycle Management

RustDesk adheres strictly to data minimization principles, ensuring personal information is not retained indefinitely. Information is stored only for the duration necessary to satisfy the specific purposes for which it was collected, or as mandated by applicable legal, tax, and accounting retention periods. Once the designated retention threshold is reached, records undergo secure shredding, cryptographic erasure, or complete anonymization. Active customer profiles are generally maintained for the duration of the contractual relationship plus a statutory auditing window, whereas automated server logs are systematically purged on a rolling calendar basis.

Disclosure and Transfer of Data to Third Parties

We maintain a rigorous stance against the unauthorized sale, commercial licensing, or unvetted dissemination of your personal information. However, certain operational necessities require sharing data with trusted third-party service providers. These entities are contractually bound to maintain strict confidentiality and utilize information solely for designated operational tasks, which include:

• Cloud infrastructure hosting and secure database management providers.
• Advanced cybersecurity, threat detection, and fraud mitigation vendors.
• Authorized payment processors and financial transaction intermediaries.
• Analytics platforms utilized to monitor web traffic and landing page performance trends.

We may additionally disclose information when legally mandated by judicial subpoenas, governmental investigations, or to protect the vital legal rights and physical safety of RustDesk, our personnel, and our clientele.

Security Measures and Information Protection Infrastructure

Protecting your information against unauthorized access, alteration, disclosure, or destruction is a foundational priority. RustDesk deploys a multi-layered security architecture incorporating administrative, technical, and physical safeguards. Key protective measures comprise end-to-end encryption for data in transit using Transport Layer Security (TLS), robust AES encryption for stored data at rest, stringent role-based access controls limiting internal data availability, regular vulnerability assessments, and continuous network monitoring protocols. Despite these robust countermeasures, no digital transmission medium or electronic storage system can be guaranteed to be completely impenetrable.

Data Subject Rights and Consumer Control Mechanisms

Users retain comprehensive statutory rights regarding their personal information. Depending on your jurisdiction, you may exercise specific controls over your data footprint, including:

• Right to Access: The prerogative to request confirmation regarding whether your personal data is being processed, alongside copies of the specific records held.
• Right to Rectification: The ability to demand the immediate correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure: The authority to request the deletion of your personal data under specific statutory conditions, often referred to as the right to be forgotten.
• Right to Restrict or Object: The option to limit active processing operations or object to specific profiling and marketing activities.
• Data Portability: The right to receive your provided information in a structured, commonly utilized, machine-readable format for transmission to another entity.

To execute any of the aforementioned rights, or to submit privacy-related inquiries regarding our physical office located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, please direct formal communications to our data governance team via [email protected].