Privacy Policy

Org Chart by Red Lotus is published by Red Lotus Tecnologia da Informação Ltda. (CNPJ 49.623.066/0001-27), R. Padre Adelino, 570, sala 804, Quarta Parada, São Paulo, SP, 03303-000, Brazil ("Red Lotus", "we"). For the processing described here, Red Lotus acts under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

Org Chart by Red Lotus ("the app") is a Freshservice app that draws an organization chart from the people in your Freshservice account and lets HR plan seats, vacancies, cost centers and business units. This policy explains what data the app handles and where it goes.

1. Summary

• The app works with your own Freshservice account: what it reads comes from it, and what it writes goes back to it or to the app's storage inside the Freshworks platform.
• Nothing is sent to Red Lotus. The app has no servers or database of its own outside Freshworks, does not sell data, sets no cookies, and uses no analytics or error-reporting services.
• Two third-party services are involved, both described in section 6: jsDelivr serves the chart library, and OpenStreetMap Nominatim turns a business unit's postal address into map coordinates.

2. What the app reads

Through the Freshworks platform, with the API key the admin enters:

• requesters and agents: name, email, job title, department, location, reporting manager, active status, and the photo-link field if the admin names one
• departments, locations (name, parent, address, contact), one agent group (to check who may edit), and the service catalog item list
• for the ticket sidebar, the ticket's requester and their managers

This is used in the agent's browser to draw the chart and is discarded when the page closes, except for what section 4 lists.

3. What the app writes to Freshservice

Only when an editor asks for it (or, for the scheduled changes an editor created, on their date):

• a person's reporting manager, and a department's head
• a new requester for a new hire, and optionally an onboarding service request placed on their behalf
• locations created or edited from the Business units tab

In This app mode the daily job also writes the reporting manager the chart implies when Freshservice differs. In A directory sync mode it writes nothing on its own. The app never deletes people.

4. What the app stores

In the app's storage on the Freshworks platform, inside your account: seats (code, title, level, department, cost center, location, reports-to, incumbent, acting manager, status, notes), each seat's incumbency history, cost centers, business unit details (legal name, tax id, coordinates, notes), job levels, unit templates, scheduled changes, the latest reconciliation summary, and a change log of who changed what (up to 5,000 entries, the oldest pruned first). The change log records the editor's email.

5. Installation settings

The admin enters the Freshservice domain, an API key, the reporting-line mode, an editor group id and optional settings. Freshworks stores them; the API key is a secure parameter, encrypted by Freshworks and used only on Freshworks' servers. It never reaches agents' browsers, and Red Lotus never sees it.

6. Third parties

• jsDelivr (cdn.jsdelivr.net) serves the d3 chart libraries at fixed versions checked against fixed hashes. As with any web request, jsDelivr receives the agent's IP address and browser details. No account data is sent to it.
• OpenStreetMap Nominatim (nominatim.openstreetmap.org, operated by the OpenStreetMap Foundation, United Kingdom). When an editor saves a business unit without coordinates, the unit's postal address, and nothing else, is sent from the Freshworks platform to Nominatim to place it on the map. The answer is stored with the unit. Typing the coordinates by hand skips this. See the OpenStreetMap Foundation's privacy policy.

7. Retention and deletion

What the app stores (section 4) is kept while the app is installed and is deleted by the Freshworks platform when the app is uninstalled. Editors can export it to Excel before. Changes written to Freshservice (section 3) are your helpdesk's data and stay after uninstalling.

8. Data transfers

Account data stays within the Freshworks platform and the agent's browser, apart from business unit addresses sent to Nominatim (section 6). Red Lotus does not receive or transfer it. Where Freshworks hosts your account is set by your Freshworks agreement.

9. Your rights

Under the LGPD (Art. 18) and similar laws you may ask to confirm, access, correct or delete personal data. Red Lotus receives no data from the app, and everything it stores is held in your Freshworks account, so the account owner controls it; we will help with any request. Uninstalling the app stops all processing immediately.

10. Changes

We will post changes here and update the effective date. Material changes will be noted in the app's Marketplace listing.

11. Contact

Red Lotus Tecnologia da Informação Ltda., info@redlotus.com.br, or the contact form (subject "Privacy" or "LGPD").