Privacy Policy

Last updated: March 28, 2026

LicenseTrim ("we", "us", "our") is operated from the Netherlands and is subject to the General Data Protection Regulation (GDPR). This policy explains what personal data we collect, why we collect it, and how we handle it when you visit our website or use our service.

1. What we do

LicenseTrim is a web application that connects to your Zendesk instance via OAuth, analyzes agent login activity, and identifies unused licenses to help you reduce costs. We request read-only access to your Zendesk user data only.

2. Data controller

For website visitor data and account data, LicenseTrim acts as the data controller. For Zendesk user data that we process on your behalf, we act as a data processor under your instruction.

Contact: hello@licensetrim.com

3. What data we collect

3.1 Website visitors

When you visit our website, we collect:

• Analytics data via Betterlytics: page views, referrer, browser type, device type, country. Betterlytics is privacy-focused and does not use cookies for analytics.
• Marketing pixels: Reddit and LinkedIn conversion pixels, which may set cookies to measure ad performance. These are only loaded with your consent where required.

3.2 Account holders

When you connect your Zendesk or create an account, we collect:

• Email address
• Zendesk subdomain
• OAuth access token (encrypted, used to access your Zendesk data on your behalf)
• IP address and user agent (for security and rate limiting)

3.3 Zendesk user data (processed on your behalf)

Via the Zendesk API with users:read scope, we read:

• Agent and admin names and email addresses
• User roles (admin, agent, end-user)
• Last login timestamps
• Account suspension status

We do not access tickets, customer conversations, attachments, help center content, or any other Zendesk data beyond user profiles.

3.4 Email signups

If you sign up for updates, we store your email address, signup source, IP address, and user agent.

4. How we use your data

Purpose	Data used	Legal basis (GDPR Art. 6)
Deliver the analysis service	Zendesk user data, OAuth tokens	Performance of contract
Create and manage your account	Email, subdomain	Performance of contract
Send scan results and drift alerts	Email address	Performance of contract
Website analytics	Page views, referrer, device info	Legitimate interest
Advertising measurement	Pixel data (Reddit, LinkedIn)	Consent
Security and abuse prevention	IP address, user agent	Legitimate interest

5. Data sharing

We do not sell your personal data. We share data only with:

• Hosting provider: our servers are hosted in the EU. Your data is stored in a PostgreSQL database on infrastructure we control.
• Betterlytics: privacy-focused analytics (no personal data shared).
• Payment processor: if you subscribe to a paid plan, your payment is handled by our payment provider. We do not store credit card details.
• Sentry: error monitoring. May receive technical error data that could include request metadata, but not Zendesk user data.

6. Cookies

Cookie type	Provider	Purpose
Essential	LicenseTrim	Session management, CSRF protection
Analytics	Betterlytics	Privacy-focused page view analytics (cookieless by default)
Marketing	Reddit, LinkedIn	Conversion tracking for advertising campaigns

You can control marketing cookies through your browser settings. Essential cookies are required for the service to function.

7. Data retention

• Analysis results: retained for as long as your account is active, to support trend tracking and renewal reports.
• OAuth tokens: stored encrypted; revoked and deleted when you disconnect your Zendesk or delete your account.
• Email signups: retained until you unsubscribe.
• After account deletion: all personal data and Zendesk user data are permanently deleted within 30 days of your request.

8. Data security

We protect your data with:

• Encryption in transit (TLS/HTTPS on all connections)
• Encrypted storage of OAuth tokens and sensitive credentials
• Database access restricted to the application only
• Error monitoring via Sentry for rapid incident response
• Regular security updates to all dependencies

9. International data transfers

Our servers are hosted in the EU. If any data processing involves transfers outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.

10. Your rights under GDPR

As a data subject in the EU, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: limit how we process your data
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: for processing based on consent (e.g., marketing cookies), at any time

To exercise any of these rights, contact us at hello@licensetrim.com. We will respond within 30 days.

11. Aggregate data

We may use de-identified, aggregated data (e.g., "the average Zendesk instance has X% inactive licenses") for product improvement, benchmarking, and marketing. This data cannot identify you, your company, or any individual user.

12. Children

LicenseTrim is a business tool not intended for use by individuals under 16. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website before the changes take effect.

14. Contact

For any questions about this privacy policy or your personal data:

LicenseTrim
Email: hello@licensetrim.com

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.