Privacy Policy — LiveChat Apps

This policy covers the two LiveChat apps published by Yin Yang Inc. (trading as ClonePartner) on the LiveChat Marketplace: PII Masker and CSV Validator.

It sits alongside our main Privacy Policy, which governs the website and our migration services. That policy still applies to any dealings you have with us as a company. This page exists because the apps work differently from anything described there: they collect nothing at all.

What these apps collect

Nothing. Neither app collects, stores, or transmits any data.

When you choose a CSV file, that file is read by your own browser and processed inside the app's page. Its contents never leave your device. There is no upload step, no server that receives it, and no copy retained anywhere — by us or by anyone else.

What these apps can access in LiveChat

Nothing. Neither app requests any authorization scope. They hold no access token, cannot read your chats, archives, agents or customers, and cannot write to them.

You can confirm this without trusting us. LiveChat shows you the permissions an app asks for when you install it. These two ask for none, because neither has an App Authorization building block at all — they call no LiveChat API.

How you can verify the rest

The apps are web pages loaded in a frame inside LiveChat, so the code they run is delivered to your browser and you can inspect it there. Open your browser's developer tools, switch to the Network tab, and use the app: choose a file, run it, download the result. You will see no requests at all after the page itself has loaded.

That is not an accident of how we wrote it. The published bundle contains no fetch, XMLHttpRequest, WebSocket, EventSource or navigator.sendBeacon anywhere in it, and no localStorage, sessionStorage, cookie or IndexedDB access either. Our build checks for every one of those and refuses to produce a release if any of them appears.

Cookies, analytics and tracking

Neither app sets cookies, uses local or session storage, or includes analytics, telemetry, or tracking of any kind. We have no way of knowing whether, when, or how often you use them.

Third parties

No data is shared with third parties, because none is collected. The apps load their own JavaScript and CSS from clonepartner.com and nothing else — no content delivery network, no font service, no analytics endpoint.

Files you download

Both apps produce files for you to download: a masked CSV, a re-identification key, a validation report, a cleaned copy. These are generated in your browser and saved directly to your device. We never receive a copy.

The re-identification key produced by PII Masker maps masked values back to the original data. Treat it with the same care as the original file: keep it inside your organisation, and never send it alongside the masked file it belongs to.

Server logs

Loading the app means requesting its files from our host, so our host records the same thing every web server records: an IP address, a timestamp, and which file was requested. That happens when the app loads and never again — the file you process is not part of any request, because no request is made. These logs are covered by our main Privacy Policy.

Your rights

Data protection rights such as access, correction and erasure apply to information a company holds about you. As these apps cause us to hold none, there is nothing for us to access, correct, or erase. Rights relating to information you have given us through other channels are covered by our main Privacy Policy.

Changes to this policy

If a future version of either app ever needs to send data anywhere, this page will be updated before that version is published, and the change will be described in the Marketplace listing's release notes.

Contact

Questions about this policy: support@clonepartner.com.