Privacy Policy — Zoho Desk Extensions

This policy covers the two Zoho Desk extensions published by Yin Yang Inc. (trading as ClonePartner) on Zoho Marketplace: PII Masker and CSV Import Checker.

It sits alongside our main Privacy Policy, which governs the website and our migration services. That policy still applies to any dealings you have with us as a company. This page exists because the extensions work differently from anything described there: they collect nothing at all.

What these extensions collect

Nothing. Neither extension collects, stores, or transmits any data.

When you choose a CSV file, that file is read by your own browser and processed inside the extension's page. Its contents never leave your device. There is no upload step, no server that receives it, and no copy retained anywhere — by us or by anyone else.

What these extensions can access in Zoho Desk

Nothing. Neither extension requests access to your Zoho Desk data. They cannot read your tickets, contacts, or accounts, and they cannot write to them. They hold no OAuth scopes and no connectors.

How you can verify this

You do not have to take our word for it. Every Zoho Desk extension declares its capabilities in a plugin-manifest.json file inside the installed package. Both of ours declare:

• whiteListedDomains: [] — no external address the extension is permitted to contact. Zoho's platform blocks any request to a domain not on this list, and the list is empty.
• connectors: [] — no authenticated connection to Zoho Desk or to any third-party service.
• storage: false — no use of Zoho's extension data storage.
• config: [] — no configuration parameters, so no API key or credential is ever requested or held.

These are enforced by the Zoho Desk platform, not by us. An extension that declares no permitted domains cannot make a network request even if its code attempted one.

Cookies, analytics and tracking

Neither extension sets cookies, uses local or session storage, or includes analytics, telemetry, or tracking of any kind. We have no way of knowing whether, when, or how often you use them.

Third parties

No data is shared with third parties, because none is collected. The extensions load exactly one external file — Zoho's own Desk client SDK, from Zoho's content delivery network — which is what allows a widget to run inside Zoho Desk at all. No other external resource is loaded.

Files you download

Both extensions produce files for you to download: a masked CSV, a re-identification key, a validation report. These are generated in your browser and saved directly to your device. We never receive a copy.

The re-identification key produced by PII Masker maps masked values back to the original data. Treat it with the same care as the original file: keep it inside your organisation, and never send it alongside the masked file it belongs to.

Your rights

Data protection rights such as access, correction and erasure apply to information a company holds about you. As these extensions cause us to hold none, there is nothing for us to access, correct, or erase. Rights relating to information you have given us through other channels are covered by our main Privacy Policy.

Changes to this policy

If a future version of either extension ever needs to send data anywhere, this page will be updated before that version is published, and the change will be described in the Marketplace listing's release notes.

Contact

Questions about this policy or about either extension: support@clonepartner.com.