SMS Desk Privacy Policy
This Privacy Policy explains what data the SMS Desk app for Windows handles. The short version: SMS Desk has no accounts, no servers of ours, and no telemetry. Your Twilio credentials are stored only on your own PC, and the only place the app ever connects to is Twilio's own API, using the Twilio account that already belongs to you. Nothing you send or receive passes through Bosau Digital LLC ("we", "us"), and there is no analytics profile of you and no advertising. This policy covers the app; for the pythonandvba.com website itself, please see the website Privacy Policy.
1. Who We Are
SMS Desk is made by Bosau Digital LLC, the company behind pythonandvba.com. For any privacy-related question, contact contact@pythonandvba.com.
SMS Desk is an independent app. It is not affiliated with, endorsed by, or sponsored by Twilio, and Twilio is a trademark of Twilio Inc. You need your own Twilio account to use SMS Desk, and your use of that account is governed by Twilio's own terms and privacy policy.
2. Data That Stays on Your PC
SMS Desk stores a small amount of data locally, in the folder SMS Desk inside your Windows local application data folder. Nothing in it is uploaded anywhere by the app. It consists of three files:
settings.json holds the details you enter on the Settings page:
- Your Twilio Account SID, stored as you entered it
- Your Twilio Auth Token, encrypted using Windows Data Protection (DPAPI) and tied to your Windows user account. Copied to another machine or another Windows account, it cannot be decrypted and the app simply asks for it again
- The Twilio phone number you chose
- How often the app checks for new messages
app-state.json holds what the app needs to remember between launches:
- The phone numbers of the conversations you have opened, each with the time you last read it, so unread counts are correct
- The phone numbers of any conversations you have cleared, each with the point you cleared it from
- Whether the sidebar is collapsed, and the size and position of the window
error.log is written only if the app hits an unexpected error. See section 6.
3. What Is Sent to Twilio
SMS Desk makes network connections to exactly one place: api.twilio.com, over HTTPS. It authenticates with the Account SID and Auth Token you provided, and it does the following on your behalf:
- Reads your account name, account type and balance, so the Settings page can show them
- Reads the list of phone numbers on your account, so you can pick one instead of typing it
- Reads the messages sent to and from your chosen number, every few seconds, so the inbox stays current
- Sends a message when you press Send
- Deletes messages from your Twilio account, but only when you explicitly choose "Delete from Twilio" in the Clear dialog
All of this happens directly between your PC and Twilio. What Twilio then does with it is covered by Twilio's privacy policy, and the messages themselves also pass through the mobile networks that carry them.
4. What We Never Receive
This is the whole list, and it is short because the app has no server component at all:
- We never receive your Twilio credentials
- We never receive your messages, your contacts, or the numbers you exchange messages with
- There is no licence check, no activation and no account to create with us
- There is no usage ping, no analytics, no crash reporting and no advertising of any kind. The app never contacts a server of ours, not even to check for updates
The app can open two kinds of link in your default browser, and only when you click them: the Twilio console, and Twilio's documentation page for an error you have just seen. Opening a link tells that website you visited it, exactly as typing the address would.
5. Your Messages
SMS Desk does not keep a copy of your messages. It reads them from your Twilio account each time it checks, holds them in memory to draw them on screen, and forgets them when the app closes. There is no message database and no export file. Your message history lives in your Twilio account, where it would be with or without this app.
Two things move message text elsewhere, both only when you ask:
- Copy message puts that message's text on the Windows clipboard
- Delete from Twilio permanently removes the selected conversation's messages from your Twilio account. This cannot be undone by us or by you
6. Diagnostics and the Error Log
If SMS Desk hits an error it did not expect, it writes the technical details to error.log beside its settings, and shows you a message. That file stays on your PC; it is never sent anywhere, and there is no crash reporting service involved.
Because Twilio's own error messages sometimes quote the number involved (for example, "The 'To' number +1... is not a valid phone number"), error.log can contain phone numbers. It does not contain your Auth Token: Twilio never echoes it back, and the encrypted copy on disk is never written to the log. You can open the folder and delete the file at any time using "Open the settings folder" on the Settings page.
If you choose to send us that file when asking for support, you are sending it to us deliberately, and you can read it first.
7. Uninstalling and Removing Your Data
You can delete everything the app has stored at any time: use Open the settings folder on the Settings page and delete the files inside.
When you install SMS Desk from the Microsoft Store, Windows keeps its data inside the app's own package storage. Uninstalling the app therefore removes your stored credentials along with it. This is deliberate: what the app stores is an encrypted key to your Twilio account, and leaving it behind on a PC after you have removed the app would be the wrong default. Your data survives app updates; it does not survive an uninstall.
Removing the app does not touch anything in your Twilio account. Your messages, your numbers and your history remain there, and are managed through Twilio.
8. If You Used an Earlier Version
An early version of this app was called Twilio Inbox and stored its files in a folder of that name. When SMS Desk starts and finds no settings of its own, it copies that older folder's settings across so you do not have to enter them again. The old folder is left untouched, and you can delete it yourself if you no longer want it.
9. Children
SMS Desk is a tool for sending business and personal text messages and is not directed at children. We do not knowingly collect any information from anyone, of any age, because the app does not send us information at all.
10. Changes to This Policy
If the app changes in a way that affects this policy, we will update this page and the "Last updated" date above. Because the app has no server, we cannot notify you inside it; the current version of this policy is always the one on this page.
11. Contact
Questions about this policy, or about anything the app does with your data: contact@pythonandvba.com.
