Privacy Policy

Custom Object Explorer is published by Red Lotus Tecnologia da Informação Ltda. (CNPJ 49.623.066/0001-27), R. Padre Adelino, 570, sala 804, Quarta Parada, São Paulo, SP, 03303-000, Brazil ("Red Lotus", "we"). For the processing described here, Red Lotus acts under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

Custom Object Explorer is a full-page app for Freshdesk and Freshservice that lets agents browse the records of the account's Custom Objects. This policy explains what data the app handles and where it goes.

1. Summary

• The app does not collect, store or sell your data. It has no database and no servers of its own.
• Records are shown in the agent's browser and are never sent to Red Lotus or any third party.
• By default the app is read-only. If the admin allows changes, agents can add, edit and import records. The app never deletes records and never changes schemas.

2. What the app reads

Through the Freshworks platform, and with the API key the admin enters, the app reads from your Freshdesk or Freshservice account:

• the list of custom objects, their fields and record counts, and (on Freshservice) workspaces
• the records of the object an agent opens

Records are kept in the agent's browser memory while the app is open, so search and sorting need no further requests. They are discarded when the agent leaves the app or reloads the page.

3. What the app writes

Only if the admin turns on Allow adding, editing and importing records, agents can:

• create records in a custom object;
• change the fields of existing records.

Each change goes to your Freshdesk or Freshservice account through the Freshworks platform, as the agent whose API key the admin entered. The app never deletes records.

4. Files

• Exports. An exported Excel or CSV file is built in the agent's browser and saved to the agent's device.
• Imports. A file chosen for import is read in the agent's browser. The file itself is never uploaded. Only the records it contains are sent to your account, one at a time.
• Error reports from imports are built in the browser and saved to the agent's device in the same way.

Red Lotus never receives these files. Once saved, they are under your control and your own policies apply to them.

5. Installation settings

The admin enters an account domain, an agent's API key and whether agents may change records. Freshworks stores them; the API key is a secure parameter, encrypted by Freshworks and used only on Freshworks' servers. It never reaches agents' browsers, and Red Lotus never sees it.

6. Third-party code

The app loads the Freshworks Crayons UI library from a public CDN (jsDelivr), pinned to a version and checked against a fixed hash. No account data is sent to the CDN. As with any web request, the CDN sees the agent's IP address and browser.

7. Cookies and tracking

The app sets no cookies, uses no analytics, sends no error reports and does no tracking.

8. Data transfers

No data leaves the Freshworks platform and the agent's browser.

9. Your rights

Under the LGPD (Art. 18) and similar laws you may ask us to confirm, access, correct or delete personal data we process. Because the app stores no personal data, there is normally nothing for us to access, correct or delete, but you can still write to us. For data held in your Freshworks account, see Freshworks' privacy policy. Uninstalling the app stops all processing immediately.

10. Changes

We will post changes here and update the effective date. Material changes will be noted in the app's Marketplace listing.

11. Contact

Red Lotus Tecnologia da Informação Ltda., info@redlotus.com.br, or the contact form (subject "Privacy" or "LGPD").