Z
Zendesk MCP← Back to home

Privacy Policy

Last updated: September 12, 2026

This Privacy Policy explains how “Zendesk MCP” (“we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with https://www.zendeskmcp.com and the associated platform, dashboard, and API/MCP server (collectively, the “Service”). By using the Service, you agree to the collection and use of information as described here. If you do not agree, please do not use the Service.

We are based in Morocco. Depending on where you are located, additional rights described in Section 8 may apply to you (for example, if you are in the European Economic Area, the UK, or California).

1. Information We Collect

a. Account information. Email address, password (stored only as a salted cryptographic hash, never in plain text), full name, and company name you provide when registering.

b. Zendesk connection data. Your Zendesk subdomain, and OAuth access/refresh tokens issued by Zendesk when you authorize the connection. These tokens are encrypted at rest and used solely to make authorized API calls to your Zendesk account on your behalf.

c. Customer Data. Content from your Zendesk account (such as ticket text, help-center articles, and user/agent records) that is retrieved, processed, or cached temporarily to fulfill a request from you or a connected AI client. We do not use Customer Data to train any AI model, and we do not sell Customer Data.

d. Usage and technical data. IP address, browser and device information, log data, API call metadata (such as which tool was invoked and when), quota and usage counters, and similar diagnostic information.

e. Billing information. Our payment processor, Paddle, collects and processes your payment card and billing details directly. We receive limited transaction metadata (such as plan, seat count, and subscription status) but do not store your full payment card details.

f. Communications. Information you provide when contacting support, including the content of your messages.

2. How We Use Information

We use the information above to:

  • Create and manage your account and tenant organization;
  • Authenticate you and connected AI clients, and broker authorized access to your Zendesk data;
  • Provide, operate, monitor, and improve the Service, including quota enforcement and abuse prevention;
  • Process payments and manage subscriptions through Paddle;
  • Communicate with you about your account, security notices, and material changes to our terms or this policy;
  • Provide customer support;
  • Comply with legal obligations and enforce our Terms of Service.

We do not use your Customer Data for advertising, and we do not sell personal information.

3. How We Share Information

We share information only as follows:

  • Zendesk. To operate the integration you configure, we transmit and receive data directly with Zendesk's APIs using the OAuth tokens you authorize.
  • AI assistant clients. When you connect a client (such as Claude Desktop, Claude Code CLI, ChatGPT, Cursor, Windsurf, or a VS Code extension) to the Service, the Zendesk data you request is transmitted to that client as directed by you. That client's handling of the data is governed by its own provider's terms and privacy policy, not by us.
  • Paddle (payment processor and merchant of record). To process subscriptions, invoicing, and payments.
  • Infrastructure and hosting providers. Sub-processors who host our database, servers, and related infrastructure under confidentiality and security obligations.
  • Legal and safety. Where required to comply with law, respond to lawful requests, or protect the rights, property, or safety of the Company, our users, or others.
  • Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to continued protection of your information under a policy at least as protective as this one.

We do not otherwise share personal information or Customer Data with third parties.

4. Data Security

We apply industry-standard safeguards appropriate to the sensitivity of the data, including encryption of stored credentials and OAuth tokens, salted hashing of passwords, and access controls limiting who can view account and connection data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and API keys confidential.

5. Data Retention

We retain account information and Zendesk connection metadata for as long as your account remains active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations. Cached Customer Data used to fulfill a specific request is retained only as long as necessary for that purpose and is not kept as a standing archive of your Zendesk content. You may request deletion of your account and associated data as described in Section 8.

6. International Data Transfers

Because the Service is provided from Morocco to customers worldwide, and because supported AI clients and infrastructure providers may be located in other countries, your information may be transferred to and processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

7. Cookies and Similar Technologies

We use strictly necessary cookies or local storage to keep you signed in and remember basic preferences. We may use privacy-conscious analytics to understand aggregate usage of the Site. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from functioning.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Request deletion of your account and associated personal information;
  • Object to or restrict certain processing;
  • Request a portable copy of your data;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@zendeskmcp.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling a request, and some requests may be limited where retention is required for legal, security, or legitimate business purposes.

9. Children's Privacy

The Service is not directed to, and is not intended for use by, anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us so we can delete it.

10. Third-Party Links and Services

The Service may reference or link to third-party platforms (including Zendesk, AI assistant providers, and Paddle). This Privacy Policy does not apply to those third parties' own collection or use of your information; please review their respective privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a new “Last updated” date, and where appropriate we will provide additional notice (such as by email). Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

For any questions or requests regarding this Privacy Policy or your personal information, contact us at support@zendeskmcp.com.