Effective October 26, 2026 · Version 1.0.
1. Who we are and scope
Tall Guy Technologies Inc. (“TGT,” “we,” or “us”) is a North Carolina company providing Zendesk applications and business services. This policy covers our website, company correspondence, Marketplace business administration and our handling of information in connection with TGT apps. App-specific notices describe each product’s actual data flows. Contact contact@tallguytechnologies.com for privacy enquiries. This notice is effective October 26, 2026.
2. Our informational website
The website is intended to provide information and links, not collect visitor submissions. We do not add advertising trackers, behavioral analytics, tracking pixels, visitor accounts, contact forms or optional tracking cookies. Email links open your email application; sending an email supplies information to our mailbox. Cloudflare processes network/request information such as IP addresses, headers and timestamps to deliver and secure the site. Hosting/security processing is not the same as TGT building visitor profiles. Provider-operated security features can involve essential cookies or similar processing. We do not use website information for targeted advertising or automated decisions producing legal or similarly significant effects. We do not use browser cookies, local storage or similar technologies to remember website visitors or track them across sites. Because we do not conduct cross-site behavioral tracking, a browser’s Do Not Track signal does not change that practice. We do not embed advertising networks or other parties’ behavioral-tracking tools. This does not disable hosting or security processing needed to serve a request. Links to other websites take you to services governed by their own notices.
3. Information categories and sources
You or your organization may provide business contact details, organization and Zendesk account identifiers, support messages, attachments, configuration and diagnostic details. Marketplace and payment providers may supply billing contacts, plan/subscription status, transaction identifiers and payment/dispute records. Payment-card entry is handled by the provider; do not send card numbers or account credentials to TGT by email. Apps may access ticket, user, organization, article or configuration information only as described for that app; not every app accesses every category. Support files can contain personal or sensitive data, so provide only what is needed and use synthetic or redacted examples where possible.
4. Customer content and our role
Your organization determines why it uses its Zendesk records and manages user permissions, retention and legal grounds. Where TGT processes personal information on that organization’s instructions, it acts in the role specified by applicable law and any required data-processing agreement. TGT separately determines purposes for its own business contacts, support administration and legal/accounting records. Installing an app does not transfer ownership of customer content or make TGT the controller of every Zendesk record.
5. Purposes and legal grounds
We use information to provide requested app functionality, respond to support/enquiries, administer subscriptions, resolve disputes, protect services and comply with law. Where applicable law requires a lawful basis, relevant bases may include performing a contract with the individual, legitimate interests in secure service delivery and business administration, legal obligations, or consent for a specific optional activity. A business customer’s contract is not automatically a contract basis for every end user. Where we rely on legitimate interests, we consider the impact on individuals and applicable objection rights. Where consent is the basis, it may be withdrawn prospectively without affecting prior lawful processing.
6. App processing and storage
Our initial architecture prioritizes Zendesk-native processing and storage, including configuration/settings and Custom Objects where needed. Some products can use browser-local data, as described in their product notices. Consult the individual app’s data notice for the information it accesses, purposes, permissions, storage locations, external recipients and removal steps. Our app data guide explains what to check before installing. TGT does not obtain blanket permission to build persistent archives or unrelated data stores from Zendesk API data. If a product introduces external hosting, scheduling or AI processing, we will describe the material changes and obtain any legally or contractually required authorization before that processing begins. This notice does not itself enable those features.
8. Retention and deletion
Customer-controlled Zendesk records follow Customer’s account settings, instructions and Zendesk arrangements. Uninstalling an app may not remove records it created; follow that app’s cleanup instructions. We retain company correspondence only as needed to resolve the request and support the relationship, and business/payment records as needed for accounting, legal obligations and disputes. We review necessity and restrict access; applicable legal holds may delay deletion. Retention depends on the type and sensitivity of information, the ongoing need for support or service, applicable recordkeeping requirements and the time needed to establish or defend legal claims. Deleted information may remain in restricted provider backups until their normal expiration; we do not use those backups for new business purposes. We do not promise immediate erasure of data controlled by Zendesk, Customer or an independent payment provider. We remove TGT-controlled API data when no longer needed for its permitted function, subject to applicable law and Zendesk requirements.
9. Security and incidents
We use safeguards appropriate to the service and information involved, with access limited to authorized purposes. No system is absolutely secure, and this policy asserts no unverified certification or security guarantee. Report suspected exposure to contact@tallguytechnologies.com without sending exposed credentials or unnecessary records. TGT will investigate and provide notices and cooperation required by applicable law or agreement. This policy does not reduce statutory breach-notification duties or substitute an arbitrary response period for them.
10. International processing
Website, email and payment providers may process information in countries outside your own. We do not promise that all business information stays in Zendesk or in a particular country. Where applicable law requires transfer safeguards for processing on our behalf, those safeguards and any required agreement must be in place before that processing begins. This policy itself is not a transfer agreement, GDPR representative appointment or claim of participation in a certification framework.
11. Privacy rights and requests
Depending on applicable law, rights may include access, correction, deletion, portability, restriction, objection, withdrawal of consent and appeal of a denied request. Email contact@tallguytechnologies.com with enough information to identify the request, without passwords or unnecessary identity documents. We may proportionately verify identity or representative authority. We will respond within applicable legal deadlines and explain any lawful limitation. If you disagree with a decision, reply requesting review; you may also complain to the competent regulator or authority. We will not unlawfully discriminate for exercising privacy rights. Requests concerning your organization’s Zendesk records should ordinarily go to that organization; we will assist where legally or contractually required.
12. Business use and sensitive information
Our website and apps are intended for business users, not directed to children under 13. We do not knowingly seek children’s information through the website. An app may encounter sensitive or children’s information in a customer’s records; its presence is not automatically prohibited or rendered harmless by business use. Customer and TGT must assess applicable requirements before sensitive or regulated use. No health-data agreement, regulated-industry certification or special-category processing commitment is implied.
13. Updates and contact
We will identify the effective date and revision date of this notice. We will post updates here and provide additional notice of material changes, such as a prominent website notice or notice to the affected business contact, where required. New purposes inconsistent with prior notices require any legally required notice, choice or consent before processing changes. Privacy and business enquiries: contact@tallguytechnologies.com. TGT is based in North Carolina, United States. Contact us using the addresses above to discuss privacy requests or correspondence arrangements. This notice does not replace individual app disclosures or a required data-processing agreement.
