Privacy Policy

Help Center Bulk Editor for Zendesk, published by Cody Labs. Effective 10 November 2026 (draft).

Help Center Bulk Editor for Zendesk (the "add-on") moves your Zendesk Help Center articles and translations into your own Google Sheets and applies your edits back. This policy explains what the add-on accesses and how that data is handled. The short version: your data flows directly between your Zendesk account and your Google Sheet. Cody Labs operates no servers and never receives, stores, or transmits your Zendesk data or your Zendesk credentials. Changes you apply are made with your own API token, so Zendesk records them as you.

Information the add-on accesses

Zendesk credentials you provide: your Zendesk agent email and API token, used to authenticate to the Zendesk REST API on your behalf.
Zendesk Help Center data: the Help Center articles, translations, sections, categories, permission groups, user segments and locales returned when you export, dry run or apply.
Tabs the add-on creates in your spreadsheet: a hidden dry-run plan tab (what the last dry run intends to write) and a hidden backup tab (the prior title, body, labels, section, permission group and user segment of any article it changed, so a run can be restored). Both live in your own spreadsheet and are visible to anyone you share it with. Delete them whenever you like.
The active Google Spreadsheet: only the spreadsheet you run the add-on in (via the restricted spreadsheets.currentonly scope). The add-on cannot see your other files in Google Drive.

Link checking

The Pro broken link report requests each distinct link found in your article bodies, which can be any website. Only the request for that URL is made, from Google's servers. No article text, credentials or spreadsheet content is sent to those sites. For this reason the add-on does not declare a URL allowlist in its manifest. The scopes it requests do not change.

Where your data goes

All processing happens inside Google's Apps Script runtime, in your Google account. Zendesk data is fetched from your Zendesk account and written into your spreadsheet. It is not sent to Cody Labs or any third party. We have no database and no server that could receive it.

How your credentials are stored

Your Zendesk API token is stored using Google's PropertiesService (user properties), scoped to your Google account. It is never written into the spreadsheet and is not visible to other people you share the sheet with. It remains until you disconnect or uninstall the add-on, at which point it is removed.

License verification

If you enter a license key to unlock paid features, the add-on sends only that license key and the Cody Labs organization identifier to our payment processor, Polar, to confirm your subscription is active. No Zendesk data or Zendesk credentials are involved. See Polar's privacy policy.

Anonymous product analytics

The add-on keeps aggregate counts of six one-time milestones in Google Apps Script Properties: install, first connection, first successful run, free-limit reached, checkout opened, and license activation. The counters contain no account identifier, email, API token, Zendesk data, spreadsheet content, or license key. Per-user markers in your Google account prevent duplicate counting and ensure a Marketplace review is requested only after the first successful apply.

How the add-on uses Google user data

The only Google user data the add-on accesses is the content of the single Google Sheets spreadsheet you open it in, through the spreadsheets.currentonly scope. It uses that data for one purpose only: to write the Zendesk Help Center articles you export into that same spreadsheet, to read the rows and settings you enter so it can validate and push them back to Zendesk or refresh a scheduled inventory, and to record a backup. The add-on:

never reads or writes any other file in your Google Drive (the spreadsheets.currentonly scope makes this technically impossible);
never uses your Google user data for advertising, profiling, or training any model;
never sells your Google user data or shares it with third parties; and
never transmits it to Cody Labs or any external server, and all processing runs inside Google's Apps Script runtime under your own account.

The add-on's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Data protection & security

We protect your data, including any sensitive data, with the following mechanisms:

Encryption in transit: every network request (to the Zendesk REST API, and to Polar for license checks) is made over encrypted HTTPS/TLS.
Encrypted, isolated credential storage: your Zendesk subdomain, agent email and API token are held in Google's PropertiesService user-property store, encrypted at rest by Google and scoped to your own Google account. They are never written into the spreadsheet and are never exposed to other people you share the sheet with.
Least-privilege access: the add-on requests only the narrow spreadsheets.currentonly, script.container.ui, script.external_request, and script.scriptapp (for the continuation and scheduled-inventory triggers) scopes, so it can only ever touch the active spreadsheet and the endpoints described above, never your wider Google Drive or account.
No developer-side attack surface: Cody Labs runs no servers and no database, so your Google user data and your Zendesk data are never received, stored, or processed on our systems. There is no back-end that could be breached.
Immediate revocation: disconnecting or uninstalling the add-on deletes the stored credentials and revokes its access straight away.

Data retention & deletion

Because we store nothing on our own systems, there is nothing for us to retain or delete. Credentials and settings live in your Google account's add-on storage and are removed when you disconnect or uninstall. Zendesk data lives in your spreadsheet, under your control.

Third-party services

Zendesk: your own Zendesk account, accessed with the API token you supply.
Polar: handles paid subscriptions and verifies license keys during normal use.

Changes

We may update this policy; material changes will be reflected by the effective date above.

Contact

Questions about this policy: [email protected].

Zendesk is a trademark of Zendesk, Inc. Google Sheets is a trademark of Google LLC. This add-on is independent and not affiliated with or endorsed by either.