DOB Desk — Privacy Policy

Last updated July 22, 2026

DOB Desk is a product of MoLabs LLC (“DOB Desk,” “we,” “us”). This policy explains what we collect through the DOB Desk website at dobdesk.com and its DOB NOW autofill browser extension, how we use it, and who we share it with. Questions: support@dobdesk.com.

Who this is for

DOB Desk is a professional tool for licensed New York City architects and engineers and their staff. It is not directed to children, and we do not knowingly collect data from anyone under 18.

What we collect

  • Account information. Your email address, and — if you sign in with Google — the basic profile (name, email, profile picture) Google shares when you choose that sign-in method. We use this only to create and authenticate your account. We never receive your Google password, and we request no access to your Gmail, Drive, or contacts.
  • Filing and project data you enter. The property addresses, work types, scope descriptions, cost figures, and related details you type into DOB Desk to prepare a DOB NOW filing. This is your working data, used to generate your prep package and stored so you can return to your projects.
  • Plan sets you upload (Plan Check). If you use the optional Plan Check feature, you upload a plan-set PDF for an AI code pre-review. The file is stored briefly in encrypted storage, sent to our AI provider to generate the review, and deleted promptly after the review completes. These documents may contain project or third-party information — you are responsible for having the right to upload them.
  • Payment information. If you subscribe, payment is processed by Stripe. We receive your subscription status and billing period from Stripe — we never see or store your full card number.
  • Improvement telemetry (consented). The browser extension can send “field reports” — the labels of DOB NOW form fields and whether the extension matched them, never the values you typed — plus DOB-displayed filing status and fee amounts. This improves autofill accuracy for everyone and is controlled by a toggle in the extension. See the extension privacy policy for detail.
  • Support correspondence. Emails you send to support@dobdesk.com and feedback you submit in the app.

How we use it

  • To provide the service: prepare your filings, autofill DOB NOW, decode objections, track permits, and manage your account.
  • To process your subscription and issue your ZoneIQ license.
  • To improve the product — chiefly the accuracy of DOB NOW field matching and the shared objection knowledge base.
  • To contact you about your account, filings, and support requests.

We do not sell your data, and we do not use it for advertising.

Service providers we share data with

We use a small set of vendors strictly to operate DOB Desk. Each receives only what it needs:

  • Supabase — database and authentication (your account and project data).
  • Stripe — subscription payments.
  • Vercel — website and application hosting.
  • Resend — transactional and support email.
  • Google — only if you choose “Sign in with Google,” for authentication.
  • Anthropic — only when you use an AI feature (e.g. drafting a scope, decoding an unmatched objection, or running Plan Check). For most features only the text of the request is sent; for Plan Check, the plan-set PDF you upload is sent so the model can review it. It is not used to train third-party models.
  • NYC Open Data / NYC Planning — public city data lookups (address, BIN, PLUTO, permits). These are queries of public records; we send the address or BIN you look up.

Cookies and sessions

We use a login session (stored by your browser) to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

Data retention and your choices

We keep your account and project data while your account is active. Plan-set PDFs uploaded to Plan Check are deleted promptly after the review is generated and are not retained. You can request a copy or deletion of your data, or close your account, at any time by emailing support@dobdesk.com. Some records (e.g. billing history) may be retained as required for legal and accounting purposes.

Security

Data is encrypted in transit (HTTPS) and stored with our providers' encryption at rest. Access is limited to what's needed to run the service. No system is perfectly secure, but we work to protect your information.

Changes

We may update this policy; material changes will be reflected by the “last updated” date above.

Contact

MoLabs LLC · support@dobdesk.com