Default Data Types Captured by Zendesk Services

Like you, we care about the data that we put into our tools and services. Whether you’re using this data to meet internal privacy policies, evaluate our offerings via vendor or privacy review or determine where your use case falls according to regulatory frameworks, we make it easy for you to find the information you need. The list below includes default data points captured (by product) regardless of use case. For a more comprehensive picture of your data types, use this resource in combination with your specific use case data and any resultant data types.

Please consider these points when using this list:

• Non-default, custom configurations, integrations or use of third party services may alter this list respectively.
• Your individual use case will largely determine the type, amount, and sensitivity of data you and/or your end users put into your instance(s) of the service.
• As a Data Processor for thousands of Data Controllers (i.e., Subscribers), we don’t always have insight into individual customer use cases, nor can we integrate individual tenant data policies into our service. You, as the Data Controller, are tasked with administering the data in your instance and using the tools that we provide you with to ensure your treatment of data maps to your own policies as well as regulatory frameworks within your industry.
• For more information on contractual requirements for data treatment, please see our Main Services Agreement (“MSA”). You should also refer to the Zendesk Shared Responsibility model for more information on responsibility boundaries.

This article covers the data points captured by the following Zendesk services:

• Support
• Guide
• Gather
• Chat
• Messaging
• Sell
• Talk
• Explore
• SunCo (Conversations)
• Sunshine
• Mobile Apps
• Software Development Kits (SDKs)

Default data points captured by the services (at minimum):

Support:

1. Username (which may or may not be the individual's actual name).
2. Salted hash of the user's password (where passwords are chosen as the authentication mechanism).
3. IP address as perceived by our edge architecture (which may or may not be the actual user’s originating IP address).
4. Selections made within drop down menus or radio boxes.
5. Any text entered into free form text fields (e.g., titles, text boxes, ticket comment fields, satisfaction survey fields, search fields, etc.).
6. Date and time of events as perceived by the app.
7. Any data added to Agent or Admin profiles or signatures.
8. Any data digested by incoming emails (where emails are allowed for ticket instantiation).
9. Any data contained in attachments.
10. Owner, Admin configuration choices.
11. Contact information for the instance Owner and Agents.
12. Email addresses of Users.
13. Any communication, setup, or integration data entered into the Side Conversation feature.
14. The chosen domain name of your instance (as well as any TLS certificate data you, or a third party TLS certificate service upload, where using host mapping)

Guide:

1. Any data added to Guide help center articles.
2. Any data added to Guide help center article comment sections (where comments are enabled).
3. Any attachments or images uploaded to the Guide help center (e.g,. comments, images, logos, article attachments, front page images, etc.).
4. Any custom code added to the Guide help center.

Gather:

1. Any topics or posts added to the Gather community
1. And attachments or images added to Gather topics or posts.

Chat:

1. Username (which may or may not be the individual's actual name), or visitor number where unauthenticated End Users are allowed.
2. Email of the End User (which may or may not be the actual email when unauthenticated Chats are allowed). Please note that unauthenticated (i.e., anonymous Chats will begin even when no username or email is submitted by the End User).
3. Salted hash of the user's password (where passwords are chosen as the authentication mechanism).
4. IP address as perceived by our edge architecture (which may or may not be the actual originating IP address)
5. Country and City associated with said IP address.
6. Any text data added to the Chat window.
7. Operating System (OS) and version used by Chat End User(s).
8. End User's device type.
9. Browser and version of the Chat End User.
10. Date and time of events as perceived by the application.
11. Any data in attachments, Owner or Admin configuration choices.
12. Owner’s contact information.
13. Any data collected by custom fields when created via Software Developer Kit (SDK).

Messaging (Workspace + Bot)

1. Username (which may or may not be the individual's actual name).
2. IP address of users as perceived by the edge architecture (which may or may not be the actual user’s originating IP address).
3. Country and City associated with said IP address.
4. Choices made within drop down menus or radio boxes.
5. Any text entered into free form text fields (e.g.,titles, text boxes, ticket comment fields, satisfaction survey fields, search fields, etc.).
6. Date and time of events as perceived by the app.
7. Any data digested by incorporated channels (e.g,  email, chat, voip, Instagram, etc.).
8. Any data contained in attachments.
9. Email address of users.
10. Operating System (OS) and version used by a user.
11. User’s device type.
12. Browser and version of a user.
13. Any workflows or bot configurations created with Flow Builder.
14. User unique identifier (this could be the user’s email address, or a business defined identifier - not controlled by Zendesk). This is referred internally as an external_id.

Sell:

1. Username (which may or may not be the individual's actual name).
2. Salted hash of the user's password (where passwords are chosen as the authentication mechanism).
3. IP address of users as perceived by our edge architecture (which may or may not be the actual user’s originating IP address).
4. Country and city associated with said IP address.
5. Choices made within drop down menus or radio boxes.
6. Any text entered into free form text fields (e.g., titles, text boxes, ticket comment fields, satisfaction survey fields, search fields, etc.).
7. Date and time of events as perceived by the app.
8. Any data added to a user profile or signature.
9. Any data digested by incoming and outgoing emails (when email integration is enabled).
10. Any data in calendar events.
11. Any data contained in attachments.
12. Owner and Admin configuration choices.
13. Contact information for the instance owner and users.
14. Email address of users.
15. Operating System (OS) and version used by a user.
16. User’s device type.
17. Browser and version of a user.
18. Call recordings (if enabled).
19. Text messages (if enabled).
20. Any data filled in for Leads, Contacts, Deals or any of associated objects (e.g. Notes, Tags, Calls) including data entered in custom fields.

Talk:

1. The choice of whether or not to retain call recordings is entirely yours as a Zendesk Talk subscriber. When choosing to record calls, the content of any calls will be captured and retained until either your decision to delete such calls, or your termination of account.
2. Originating telephone number (caller)
3. The destination number (call recipient)
4. The country of origin for the call (as determined by number).
5. The user name or ID of agent answering (which may or may not be the actual person's name).
6. Duration of call.
7. When choosing to record custom greeting messages or privacy warnings, the content of such recordings will be captured and retained until deleted by Subscriber, or upon termination of account.

Explore:

Use of the Explore product primarily entails the analytics of data already existing within a Subscriber’s Support instance.  Additional data points include:

1. Any new names and/or email addresses added as dashboard export recipients
2. Any text used for custom dashboard titles or search queries
3. Any images uploaded to dashboards.

Sunshine Conversations (SunCo):

1. Name, Email, Creation Date of Sunshine Conversations Administrator 
2. Name, Creation Date of all created Service Accounts
3. Name, Creation Date, Channel Integrations, Webhooks and API Keys of all created Apps
4. External ID, Sign-Up Date and, when applicable, Given Name, Last Name, Email, Avatar URL, Locale and all elected custom user properties of all End Users using the services
5. Unread Count and Read Timestamps of all Conversations
6. Conversation ID, Author ID, Name, Avatar, Received Date, Channel Source, Attachment and Content of all Messages in a Conversation
7. Channel Name, Conversation Title, SDK Version, User Agent, External ID, Display Name and Personal Identifiable Information of all Clients automatically generated for Users when they send Messages 
8. Third-party credentials and IDs, configuration and other integration metadata of all Integrations created via the Dashboard
9. Triggers, Target URL and Secrets of all Webhooks 
10. Template Name and Message Content of Templates created for all structured Messages.

Sunshine:

In addition to what is captured in Support: 

Custom Objects (if used) 

1. Object Types (definitions of objects) as defined here. 
2. Object Records (objects created based on Object Types). 
3. Relationship Types (definition of relationship between objects) as defined here. 
4. Relationship records (relationships created based on Relationship Types).
5. Custom Objects Events (early access only) as defined here.
6. Metadata of Custom Object Jobs as defined here. 

Profiles (if used)

1. Custom Profiles assigned to users as defined here.

Events (if used) 

1. Custom Events associated with profiles as defined here. 

Mobile Apps: 

Support Mobile Application

1. Username (which may or may not be the individual's actual name).
2. Salted hash of the user's password (where passwords are chosen as the authentication mechanism).
3. IP as perceived by the edge architecture (which may or may not be the actual user’s originating IP address).
4. Choices made within drop down menus or radio boxes.
5. Any text entered into free form text fields (titles, text boxes, ticket comment fields, satisfaction survey fields, search fields, etc.).
6. Date and time of events as perceived by the app.
7. Any data added to agent or admin profiles or signatures.
8. Any data digested by incoming emails (where emails are allowed for ticket instantiation).
9. Any data contained in attachments.
10. Owner, admin configuration choices.
11. Contact information for the instance owner and Agents.
12. Email address of Users.
13. Operating System and version used by a user.
14. User’s device type.

Sell Mobile Application

1. Username (which may or may not be the individual's actual name).
2. Salted hash of the user's password (where passwords are chosen as the authentication mechanism).
3. IP of users as perceived by the edge architecture (which may or may not be the actual user’s originating IP address).
4. Country and city associated with said IP (?)
5. Choices made within drop down menus or radio boxes.
6. Any text entered into free form text fields (titles, text boxes, ticket comment fields, satisfaction survey fields, search fields, etc.).
7. Date and time of events as perceived by the app.
8. Any data added to a user profile or signature.
9. Any data digested by incoming and outgoing emails (when email integration is enabled).
10. Any data in calendar events.
11. Any data contained in attachments.
12. Owner, admin configuration choices.
13. Contact information for the instance owner and users.
14. Email address of users.
15. Operating System and version used by a user.
16. User’s device type.
17. Browser and version of a user.
18. Call recordings (if enabled).
19. Text messages (if enabled).
20. Any data filled in for Leads, Contacts, Deals or any of associated objects (e.g. Notes, Tags, Calls) including data entered in custom fields.

Chat Mobile Application

1. Username (which may or may not be the individual's actual name).
2. Salted hash of the user's password (where passwords are chosen as the authentication mechanism).
3. IP as perceived by the edge architecture (which may or may not be the actual originating IP address). 
4. Country and City associated with said IP.
5. Any text data added to a Chat conversation.
6. Operating System and version used by Chat end users.
7. End user's device type.
8. Browser and version of the Chat end user.
9. Date and time of events as perceived by the app.
10. Any data in attachments.

Software Development Kits (SDKs)

See here for a comprehensive list of default data types captured when using our Software Development Kits (SDKs).

Other Resources:

For concerns around data privacy within Zendesk services, refer to our Security page, Trust Center, In-Product Cookie Policy, and our Main Services Agreement.