Trust
Every promise, with a way to check it.
A software company saying it respects your data is worth nothing on its own. So here is each thing we claim, why it is true, and how you would catch us if it were not.
- 01
Your mail is on your computer, not on our servers.
OleaDesk is a desktop application. Connecting an inbox downloads your messages into a database file on your own machine. We do not host your mailbox, we hold no copy of it, and there is nothing on our side to hand over, sell or lose.
Check it Look for the file. It is a normal SQLite database in your own application data folder, and any SQLite viewer will open it. Then disconnect from the internet: your mail is still there, still searchable.
- 02
Your mailbox password never reaches us.
It goes into the Windows Credential Manager, the same vault your other applications use. The app reads it locally when it talks to your mail provider.
Check it Open Credential Manager in Windows and you will find it there, under OleaDesk, alongside everything else on your machine.
- 03
Your content leaves your machine only for the assistant’s own work, and we name the parts that happen in the background.
Drafting, summarising and writing outreach send the specific text that task needs, and nothing more. Three of those jobs run in the background so the answer is ready before you ask: it re-reads your recent sent mail a few times a day to keep learning your voice, it drafts replies to the messages waiting for you, and it indexes your mail so searching by meaning is instant. Voice learning and drafting ahead are on when you install; the index runs only while the assistant is connected. Your archive as a whole is never uploaded, and neither are your contacts.
Check it Voice learning and preparing replies ahead are switches in the assistant’s settings; the index runs while the assistant is connected. Turn the assistant off and watch the app with any network monitor: it talks to your mail provider and to nobody else.
- 04
We do not keep what you send through the relay.
We record who made the request, when, which feature it was, and what it cost us. That is the whole of it, and it is the minimum that lets us bill fairly and catch runaway costs. The request and the response themselves are not stored, and none of it trains anything.
Check it Ask us for everything we hold on your account, in writing. You will get the metering rows and nothing resembling your email, because there is nothing else to send.
- 05
Every buyer is a real company, checked against your brief.
Your agent works from the brief you wrote and checks each company against it, one at a time. Every contact we hold is a business contact: the person or the desk that handles trade enquiries.
Check it Open any buyer your agent found and read the reason it gives. It says what it checked, and marks anything it could not establish as unknown rather than guessing.
- 06
Nothing is sent to anybody until you have approved it.
There is no automatic-send setting, on any plan, including the one where we run the desk for you. Every message waits for you to read it and say yes.
Check it Go looking for the switch. There isn’t one, and there is no hidden mode, no scheduled campaign that starts itself, and no paid tier that unlocks it.
- 07
Your agent never quotes a price or agrees terms.
The moment a buyer asks what something costs, the sequence stops and the conversation is handed to you. A wrong number in a trade quote is not an embarrassment, it is a contract argument, and no model is allowed near that.
Check it Write to one of your own agents as a buyer and ask for a price. Watch it stop.
- 08
Every number and link in a draft is checked against the thread before you see it.
Before a draft reaches you, the prices, quantities, dates and links in it are compared with what is actually in the conversation. Anything that cannot be accounted for is flagged rather than quietly sent.
Check it Put a figure in a draft that appears nowhere in the thread and watch it get flagged back at you.
- 09
We do not track whether anyone opened your email.
There is no tracking pixel in anything OleaDesk sends. Open tracking is what puts an invisible image in a stranger’s inbox to report on him, and it is also the thing that most reliably lands trade mail in a spam folder.
Check it Send yourself an email from OleaDesk and read the source. There is no beacon in it.
- 10
Every number published on this site is measured, and says how.
Right now there is no results figure on this site at all. We ran one, measured from the founder’s own funnel, and took it down in August because it came from a single company selling one thing and was too small to mean anything for your market. There are no customer counts, no logo wall and no testimonials from people who do not exist. When a number goes back up it will say how it was counted, in a sentence.
Check it Ask how a number was counted. If we cannot answer that in one sentence, it should not be on the site, and it comes down. That has now happened once, to our own best number.
Who you are dealing with
OleaDesk is a product of Clearpath Goods, LLC, 10421 Kardwright Ct, Montgomery Village, MD 20886, United States, and Maryland, United States law governs the agreements. The installer is signed under that name, which is why Windows says Clearpath Goods, LLC rather than OleaDesk when you run it. That signature is the check: Windows verifies it every time you run the file, and a copy altered after it left us fails that check without you having to do anything. The current build is 0.1.134.
The full documents are on the legal page: privacy, terms, the data processing agreement, who our sub-processors are, the sending policy and how to report abuse. This page is the short version of the parts most people want to know.
What we do not have, and what is certified
OleaDesk holds no security certification of its own. No SOC 2, no ISO 27001. They are real pieces of work and we have not done them, and putting a badge on this page that implied otherwise would undo the point of the page.
The infrastructure underneath it is certified, which is a different statement and worth being precise about. Your account records and buyer data sit in Supabase, in their EU region, and Supabase holds SOC 2 Type II and ISO 27001. The website and the relay run on Vercel, which holds both as well. An audit covers the company that was audited, so this is not us being certified and we will not describe it that way. If your procurement asks, the accurate answer is that our infrastructure is certified and OleaDesk itself is not, and you can check both in a minute at supabase.com/security and vercel.com/security.
If any line above stops being true, it comes off this page the same day. That is the only commitment here that is about us rather than the software, and it is the one the rest depends on. Found something that does not match? Write to Ahmed and you will get an answer within one business day.