Privacy notice

Who we are

US Expat Desk runs usexpatdesk.com. ז׳ואאו אשוטי, a sole trader trading as US Expat Desk, provides our services. The business address is Allenby 38, Tel Aviv, Israel. ז׳ואאו אשוטי is the data controller and decides how the information described here is used. In this notice, “we” and “us” mean US Expat Desk. For any privacy question or request, email hello@usexpatdesk.com.

The short version

• The website has no accounts and no sign-in.
• The free tools never send what you enter to a server. Only the request and checkout forms and emails you send us are stored.
• Card payments go through Stripe's checkout. We never see or store your card details.
• We use your information only to answer you and to do the work you ask for.
• An AI model drafts replies, and a person reads every draft and sends every reply.
• We use no analytics, advertising, or tracking, and we never sell or share your information for advertising.
• We don't take cases from people who live in the European Union, the European Economic Area, or the United Kingdom.

Free tools and My Desk

The free calculators run in your browser. What you type is not sent to us. Print, calendar, and JSON exports are files your browser creates on your device.

My Desk keeps your plans and lists in this browser until you delete them or clear your browser data. We never receive them. Export a JSON backup if you want a copy.

When you ask for a quote

When you request a quote, the form sends us the service, the country you live in now, your timing, what the documents are for and your appointment or deadline date if you give them, your name, your email address, and any note you add. Emails you send to hello@usexpatdesk.com are kept with your request. We store both in a database on Cloudflare and use them only to check availability and reply.

Do not include passport numbers, Social Security numbers, bank details, passwords, or images of documents. The form rejects numbers that look like identifiers. In the copy of each email we keep in our case inbox, numbers that look like identifiers are removed and attachments are dropped.

A copy of each email you send to hello@usexpatdesk.com, with numbers that look like identifiers removed and without attachments, is also sent to the desk's private mailbox, which Google hosts. A notice of each form request, with the details you entered, goes to the same mailbox. Email to any other usexpatdesk.com address is forwarded in full to the same mailbox. Please leave identifiers and documents out of emails as well as the form.

A person reads every draft and decides what to send. The only automatic email is a fixed confirmation of your request and its reference, sent to the address you gave. Cloudflare Turnstile checks that a request comes from a person. It sets no tracking cookies.

How AI helps with replies

An AI model run by Cloudflare reads your request and the latest messages in your case. It suggests what the request is about, how urgent it is, notes for the person reviewing it, and a draft reply. The model never sends email, sets a price, or makes a decision about you.

Cloudflare's AI Gateway passes each drafting request to the model and keeps no log of it, so the case text is not stored there. We do not use your information to train AI models.

When you pay online

When you pay online, the checkout form sends us the same details as a request, plus the number of documents you chose. Stripe, our payment processor, then collects your card details on its own checkout or invoice page, processes the payment, and emails your receipt. Stripe also uses payment information under its own privacy policy, for example to prevent fraud. Stripe tells us the amount, the payment number, your name, your email address, and your billing country. We never receive your card number.

Stripe keeps its own payment records under its own policy. Our record of the payment stays with your case. A checkout you start on our pay online page but don't pay for is deleted after 30 days.

When you hire us

If you accept a quote or pay for a case, we tell you before any work starts what the case needs, how to share it with us securely, who will receive it, and how long we keep it. We share case information only with the agencies and partners needed to finish the job you asked for, such as a courier, notary, translator, FBI-approved channeler, licensed tax professional, or payment provider.

Who handles it for us

• Cloudflare hosts the website and runs our database, our email inbox and outgoing email, the AI drafting, the bot check on our forms, the sign-in that protects our case inbox, and our error logs. It handles this information for us.
• Stripe processes card payments for us, and also uses payment information for its own purposes, such as fraud prevention, under its own privacy policy.
• Google hosts the desk's private mailbox, which receives the messages described above.
• Case partners, such as a courier or translator, receive only what that case needs, and we tell you who they are before work starts.

Cloudflare hosts the website on a global network. To deliver and protect each page, Cloudflare processes standard request information such as your IP address, browser type, the page requested, and the time. We do not use it to build profiles. We give information to a government agency only as part of a job you asked for, or when the law requires it.

Where your information is handled

Cloudflare's network has data centers in many countries, so pages, forms, and emails can be processed in many places, including the United States. Our database, AI drafting, mailbox, payment provider, and partners may store or process your information outside the country where you live, and we work on cases from outside the United States. Privacy laws in those countries may differ from yours. We send each provider and partner only what its part of the work needs.

Why we use it

We use your information to answer your request, to deliver a service you accepted, to keep the website secure, and to meet any legal duty that applies to a record. No law requires you to give us this information, but without your email address and the service you need, we can't answer you. We never use it for advertising or to make an automated decision about you.

How long we keep it

• Requests and emails that don't become a case are deleted automatically 12 months after the last message or update.
• A case we close with no payment record is deleted automatically 12 months after the last message or update.
• For a closed case with a payment record, the messages, notes, and case details are deleted automatically 24 months after the last message or update. The payment record stays.
• Payment records, meaning your name, email address, the service, what was paid and when, our cost ledger for the case, and payment notices from a payment provider, are kept for 7 years after the case's last update for tax and accounting, then deleted automatically with the rest of the case.
• Cases that are still open stay in our case inbox until we close them.
• Checkouts on our pay online page that are never paid are deleted after 30 days.
• Email in the desk's Google mailbox is not deleted on a schedule.
• The AI drafting log is off, so it keeps no copy of drafting requests.
• Deleted database records can remain in Cloudflare's 30-day database backup until that backup rolls over. Cloudflare keeps the website's error logs for a short time.
• Stripe keeps payment records under its own policy. My Desk entries stay in your browser until you delete them.

How we protect it

The website and email use encrypted connections. Our case inbox is behind Cloudflare Access sign-in and is open only to the person who runs the desk. Payment and email keys are stored as encrypted secrets, never in the website code. We ask for no identity numbers or document images, and we keep as little as each job needs.

No system is perfectly secure. If a security incident affects your information, we tell you and any regulator as the law requires.

Your rights

You can ask us to show you the information we hold about you and give you a copy, to correct it, to delete it, or to stop using it. Depending on where you live, privacy laws, including the laws of several US states, give you rights like these. We honor them for everyone, wherever you live.

We don't sell your information or share it for targeted advertising, and we don't profile you, so there is nothing to opt out of. Using your rights never changes our price or service.

To make a request, email hello@usexpatdesk.com from the address you used with us and include your reference if you have one, and we reply within 30 days. We may ask you to confirm the request from that address. We never ask for an identity document to confirm a request. Someone you authorize in writing can ask for you.

If the law lets or requires us to keep something, such as a record of a payment, we tell you what we kept and why. If we decline a request, reply to ask us to look again, and we tell you the result and how to complain to a regulator. You may also complain to the data protection authority where you live.

Your My Desk entries live only in your browser, so you control them directly. We cannot see, export, or delete them for you.

People in the EU, the EEA, and the UK

Our services are not offered to people who live in the European Union, the European Economic Area, or the United Kingdom. The request form turns those countries away before anything is stored. If a payment shows a billing country there, we confirm where you live before any work starts and refund you if you live there. If you move to one of those countries while we are working on your case, we finish the job you accepted.

Children

Our services are for adults. A parent or guardian may ask us for help with a child's document, and we use the child's information only for that job.

Older products

If you had a website account before October 10, 2026, email us about the information from that account. An iPhone and iPad app was tested privately and never released. It kept entries on the tester's device and iCloud, and we never received them.

Changes to this notice

We update this page when our services, tools, or providers change, and the date at the top shows the latest version.