1. Who we are
RecordLint is provided by Mykhailo Ihnatiev, NIP 8971938345, Komuny Paryskiej 58, lok. 40, 30-389 Krakow, Poland. Privacy questions can be sent to privacy@recordlint.com.
2. Scope and roles
This notice covers the RecordLint website, support communications, and the RecordLint app for Zendesk. A Zendesk customer chooses which records are scanned and is normally the controller of that customer data. RecordLint acts as its processor. We act as controller for limited website, business-contact, security, and support information needed to operate the service.
3. Information we process
- Installation identifiers, Zendesk account hostname, and administrator ID and role.
- Encrypted administrator contact details and OAuth credentials.
- Temporary encrypted user-profile and organization data needed for configured checks.
- Data-minimized findings, decisions, aggregates, policy, and audit metadata.
- Website request data and information you choose to send in a support request.
RecordLint does not intentionally access ticket bodies, comments, attachments, message content, passwords, authentication factors, or payment-card data.
4. Why we process it
We process data to authenticate administrators, run a scan they explicitly request, apply deterministic hygiene rules, explain and prioritize possible data-quality issues, provide reports, secure and troubleshoot the service, and honor retention or deletion requests.
RecordLint is read-only. Findings are recommendations for human review—not identity truth, fraud findings, or automated decisions. We do not sell personal information, use it for targeted advertising, or use Zendesk API data to train AI models.
5. Legal bases for data we control
For our own limited business-contact and website data, we rely on performing requested services, legitimate interests in operating and securing a B2B service, compliance with legal duties, and consent where the law requires it. Customer-controlled Zendesk data is processed under the customer's documented instructions and applicable data processing agreement.
6. Sharing and international transfers
We disclose data only to service providers needed to operate RecordLint, as listed on the Subprocessors page, or when law requires. For restricted transfers outside the EEA, we use an adequacy decision or approved safeguards such as the EU Standard Contractual Clauses where required.
7. Website technology
The initial public website will not use advertising pixels, behavioral analytics, or non-essential tracking. Essential hosting, security, routing, and session technology may process IP address, request time, requested page, browser or device information, and security signals.
The private pre-launch preview may use ChatGPT authentication through OpenAI. Current providers are listed on the Subprocessors page.
8. Retention and deletion
Raw Zendesk profile data is an encrypted temporary workspace with a maximum 24-hour lifetime and earlier cleanup on cancellation, disconnect, or tenant deletion. CSV reports stream to the requesting administrator and are not archived by RecordLint. Detailed periods appear in the Retention Notice.
9. Your rights
Requests about Zendesk end-user data should normally go to the Zendesk customer that controls the account. For information we control directly, contact privacy@recordlint.com. Depending on applicable law, you may have rights to access, correct, erase, restrict, object, or obtain a copy of your information.
You may lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland or another competent supervisory authority.
10. Contact and changes
RecordLint is a B2B service and is not directed to children. Material changes will be identified by a new effective date and communicated through the service or customer contact channel. Contact: privacy@recordlint.com.