Legal
Privacy Policy
Effective May 31, 2026
JP Works LLC ("we," "us," or "our") operates deskhey.com (the "Site") and the product brand "Deskhey." This Privacy Policy explains what information we collect when you visit deskhey.com, how we use it, who we share it with, and the choices you have. It applies only to this marketing and informational website, which is intended for visitors in the United States. It does not cover the Deskhey service itself, which practices use under a separate service agreement.
Deskhey is an AI front desk built for US private medical and aesthetic practices. You can learn about the product and book a call here, but the product is not delivered or operated through this Site.
Information We Collect
Information you provide to us. When you fill out the lead form on the Site, we collect the information you choose to enter:
- Your name
- Your email address
- Your phone number
- Your practice name
- An optional message
If you book a call with us, scheduling is handled through Calendly. When you use the Calendly scheduler, the details you submit there (such as your name, email, and the time you select) are processed by Calendly to set up the meeting.
Information we collect automatically. When you visit the Site, we and our analytics provider collect certain technical information automatically, including:
- Your IP address
- Device and browser information
- Pages you view and the order in which you view them
- How you interact with the Site (clicks, scrolls, and similar activity)
We collect this through cookies, local storage, and similar technologies, described in more detail below.
How We Use Information
We use the information we collect to:
- Respond to your inquiries and follow up on call or contact requests
- Schedule and conduct calls you book with us
- Understand how visitors use the Site so we can improve its content, layout, and performance
- Maintain the security and proper functioning of the Site
- Keep records of our communications with you
We do not use the information from this Site to make automated decisions that produce legal or similarly significant effects about you.
Cookies and Analytics
We use cookies and local storage for two purposes: to keep the Site functioning properly and to measure how visitors use it. For analytics, we use PostHog, a first-party product analytics tool, to understand traffic and improve the Site.
We do not use advertising cookies, and we do not use cookies to track you across other websites or services. Because of that, we do not display a cookie consent banner.
You have control over these technologies:
- You can set your browser to refuse some or all cookies, or to alert you when a site sets one. If you block cookies, some parts of the Site may not work as intended.
- We honor the Global Privacy Control (GPC) signal. If your browser or a browser extension sends a GPC signal, we treat it as a request to opt out of analytics capture, and we will not record your activity in our analytics for that visit.
How We Share Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We share information only with service providers (sometimes called sub-processors) that help us operate the Site, and only as needed for them to perform their function on our behalf:
- Calendly, to schedule and manage calls you book with us
- PostHog, to provide first-party analytics about how the Site is used
- Vercel, to host and serve the Site
These providers are permitted to use your information only to provide services to us, not for their own independent purposes.
We may also disclose information if required to do so by law, to respond to lawful requests from public authorities, or to protect our rights, safety, or property and those of others. If our business is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Your Privacy Rights
This section describes the rights available to residents of California under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA). Depending on where you live, similar rights may apply to you, and we are happy to honor reasonable requests from any US visitor.
Subject to certain exceptions, you have the right to:
- Know and access the personal information we have collected about you, including the categories of information, the sources, the purposes for collecting it, and the categories of third parties with whom we share it
- Delete the personal information we have collected from you
- Correct inaccurate personal information we hold about you
- Opt out of the sale or sharing of your personal information. We do not sell or share your personal information for cross-context behavioral advertising, but we honor the Global Privacy Control (GPC) as an opt-out signal for analytics capture
- Be free from discrimination for exercising any of these rights. We will not deny you service, charge you a different price, or provide a different level of quality because you exercised a privacy right
To exercise any of these rights, email us at justin@jpworks.io with your request. So we can respond, please tell us what you are asking for and include enough information for us to locate your records (for example, the name, email, or phone number you submitted). We will take reasonable steps to verify your identity before acting on your request, and we will not use the information you provide for verification for any other purpose. You may use an authorized agent to submit a request on your behalf, and we may ask the agent for proof of authorization.
Data Retention
We keep the contact and lead information you submit only as long as we need it to respond to you and for our ordinary business records. When we no longer have a business reason to keep it, or when you ask us to delete it, we will delete it, subject to any legal obligation to retain certain records. Analytics data is retained on a limited basis to help us understand and improve Site performance.
Security
We take reasonable administrative, technical, and physical measures to protect the information we collect against loss, misuse, and unauthorized access. No method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and keep our practices current.
A Note on Health Information (HIPAA)
This Site does not collect protected health information (PHI), and it is not the place to share it. Please do not submit any patient information or other PHI through the lead form or any other part of this Site. When a practice uses the Deskhey service and PHI is involved, that information is handled under a separate Business Associate Agreement (BAA) and governed by the service agreement, not by this website Privacy Policy.
Children's Privacy
The Site is intended for practice owners and other business decision-makers, and it is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the effective date and post the updated policy on this page. We encourage you to review it periodically.
How to Contact Us
If you have questions about this Privacy Policy or how we handle your information, contact us at:
JP Works LLC
Email: justin@jpworks.io
Mailing address: 9100 Wilshire Blvd, Ste 725 E, Beverly Hills, CA 90212
For any questions governed by state law, this Policy is governed by the laws of the State of California.