Privacy Policy
Last updated: October 17, 2026
This policy explains what data the Zendesk OData PowerBI Integration (the “app”) and its online service process, why, and what choices you have. In short: we don’t store your tickets, we keep only what the app needs to work, and you can ask us to delete it at any time.
Who we are
Section titled “Who we are”The app is provided by Triangu LLC, 444 W. Lake St. Suite 1700, Chicago, IL 60606, United States (“we” or “us” in this policy).
Contact: plugins@triangu.com.
Our role
Section titled “Our role”- Your Zendesk data (tickets, users, organizations and so on) belongs to the company that owns the Zendesk account. That company is the controller of this data. We process it only on its behalf, to deliver it to Power BI. We are its processor.
- Data about using the app (the connection, settings, tokens, billing and support messages) is processed by us as controller.
Data that passes through but is never stored
Section titled “Data that passes through but is never stored”When Power BI refreshes a report, the service reads the requested data from Zendesk and sends it straight to Power BI. Depending on the tables you choose, this can include ticket content, and names, email addresses and other details of users and organizations.
This data is processed in memory only for the time needed to answer the request. It is not written to a database, a file or a log, and it is not cached. The only exception is the list of your Zendesk custom ticket fields (titles and types, not their values), which is kept in memory for up to 10 minutes so the service can name the columns.
Data we store
Section titled “Data we store”| Data | Why we need it |
|---|---|
| Your Zendesk subdomain and Zendesk user ID | To know whose connection it is |
| Zendesk access and refresh tokens, encrypted with AES-256-GCM | To read Zendesk on your behalf when Power BI refreshes |
| Datasource settings: name, ticket filter, selected tables | To build your feeds |
| API token details: label, first characters, expiry, revocation and last-use time, and a SHA-256 fingerprint of the token | To check Power BI’s sign-in. We never store the token itself |
| Dates when the above were created | To run and support the service |
We don’t store your name, email address or password.
Other data
Section titled “Other data”- Technical data. Requests to the service pass through Cloudflare and our hosting provider, which process IP addresses and request details to deliver traffic and protect against attacks. The app itself does not keep request logs.
- Your browser. The app stores a sign-in session in your browser’s local storage inside Zendesk. It expires after 24 hours. The app sets no tracking cookies.
- Billing. Payments go through the Zendesk Marketplace and Stripe. We receive the details Stripe shares with us, such as the billing contact, the subscription status and the payment history. We never see full card numbers.
- Support. If you email us, we keep the conversation to help you.
- This website uses no analytics and no cookies.
How we use data
Section titled “How we use data”We use the data above only to:
- provide the app and the feeds you set up;
- keep the service secure and working;
- bill for the subscription;
- answer your questions.
We don’t sell data, we don’t use it for advertising, and we don’t use your Zendesk data to train AI models.
Where the GDPR applies, our legal bases are performing our contract with you (running the service and billing) and our legitimate interest in keeping the service secure and supporting you.
Who we share data with
Section titled “Who we share data with”We use these service providers (sub-processors):
| Provider | What for | Location |
|---|---|---|
| Hetzner Online GmbH | Running the service and its database | Germany (EU) |
| Cloudflare, Inc. | Network, TLS and attack protection | Global |
| Stripe, Inc. | Payments | United States / global |
| Zendesk, Inc. | Marketplace listing and billing | United States / global |
We may also disclose data if the law requires it. If we change providers, we’ll update this list.
Some providers are outside your country. Where the GDPR applies, transfers are covered by the providers’ Standard Contractual Clauses or an adequacy decision.
How long we keep data
Section titled “How long we keep data”- Connection and settings: while you use the app. Datasources are removed when you delete them.
- API token details: until you ask us to delete your data. A revoked token can no longer be used.
- Everything about your Zendesk account: deleted within 30 days after you ask us, or after the subscription ends and you ask us to remove it.
- Billing records: as long as tax and accounting laws require.
- Support emails: as long as needed to help you, then deleted.
Deleting your data
Section titled “Deleting your data”- Delete a datasource with Delete on the Datasources tab.
- Revoke an API token with Revoke on the API Tokens tab.
- To delete your connection and everything else we store, email plugins@triangu.com from the address on your Zendesk account, with your Zendesk subdomain. We’ll confirm when it’s done.
You can also revoke the app’s access in Zendesk at any time. The app then can’t read Zendesk any more.
Security
Section titled “Security”- The app has read-only access to Zendesk. It can’t change or delete anything.
- Zendesk tokens are encrypted at rest and never sent to Power BI or to your browser.
- API tokens are stored only as fingerprints.
- All traffic is encrypted with TLS.
- Each agent’s datasources and tokens are private to that agent.
See Data handling for more detail.
Your rights
Section titled “Your rights”Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict its processing, and to receive a copy of it. Email us to use these rights. We’ll reply within 30 days.
If your data is part of a company’s Zendesk account, that company controls it. We’ll pass your request to them, or help them answer it.
You can also complain to your local data protection authority.
Children
Section titled “Children”The app is a business tool and isn’t meant for anyone under 16.
Changes to this policy
Section titled “Changes to this policy”If we change this policy, we’ll update the date at the top. For important changes, we’ll tell account owners by email or in the app before they take effect.
Contact
Section titled “Contact”Questions about privacy: plugins@triangu.com, with Privacy in the subject line.