Freshdesk Freddy AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ As explained above, some of our Services include processing data on behalf of our customers in relation to Applications, tools or software that we provide. Save for the limited circumstances set out in this Notice, we are not the Data Controller of this Hosted Data as we do not determine the purposes or the means of the processing. If you wish to access, correct, update, modify or delete Hosted Data or if you would no longer like to be contacted by one of our Customers you should direct your query to the Customer, who is the Data Controller of your data. If requested by the Customer to action a Request, we will respond within a reasonable timeframe. If you are a Customer of our Services and wish to raise a Request on behalf of data subjects in connection with Hosted Data, you may raise a ticket on the support portal of the relevant Service. Please note that if a Customer has subscribed to more than one Service, a Request on a particular Service support portal is specific to that Service only and separate Requests need to be raised across other relevant Service support portals.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ provisions, rights and obligations set out in Regulation (EU) 2016/679, as relevant. ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Freshworks commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. If you have a question or complaint related to participation by Freshworks in the DPF Frameworks, we encourage you to contact us via dpo@freshworks.com. For any complaints related to the DPF Frameworks that Freshworks cannot resolve directly, we have chosen to co-operate with the relevant EU Data Protection Authority, or a panel established by the European data protection authorities, for resolving disputes with EU individuals, the UK Information Commissioner (for UK individuals) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) for resolving disputes with Swiss individuals. As further explained in Annex I of DPF Principles, binding arbitration is available to address residual complaints not resolved by other means. Freshworks is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Freshworks complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). Freshworks has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Freshworks has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/ Model Clauses: Where we use certain service providers, we may use specific contracts approved by the UK and/or European Authorities which give Personal Data the same protection it has in the UK and the EEA. For further details, see https://ec.europa.eu/info/law/law-topic/data-protection/data- transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en . ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Freshworks is committed to protecting your privacy. This Privacy Notice (“ Notice ”) outlines how Freshworks processes Personal Data in the course of our business activities, including through our website at https://www.freshworks.com/ (“ Website ”) and our Services. This Notice explains Freshworks’ approach to any Personal Data that we might collect from you, or which we have obtained about you from a third party, and the purposes for which we process your Personal Data in our capacity as a Controller (i.e. when Freshworks determines the purposes and means of the processing of personal data). It also describes your rights in respect of our processing of your Personal Data. We process Personal Data in the countries in which we are established, including the United States, the United Kingdom and the European Economic Area (“EEA”) and in other countries where third parties that we may use are based. While processing Personal Data we comply with the principles and rules of the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) and to the rights of EU and UK individuals and Swiss individuals. When Freshworks transfers Personal Data to a third party while acting as a controller, we retain full responsibility for ensuring that the third party‘s processing, in its role as a processor, complies with the DPF Principles. Freshworks shall remain liable under the DPF Principles if its processors process Personal Data in a manner inconsistent with the DPF Principles, unless Freshworks proves that it is not responsible for the event giving rise to the damage. ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 5. INTERNATIONAL TRANSFER OF DATA ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 14. GOOGLE API DISCLOSURE ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “For any complaints related to the DPF Frameworks that Freshworks cannot resolve directly, we have chosen to co-operate with the relevant EU Data Protection Authority, or a panel established by the European data protection authorities, for resolving disputes with EU individuals, the UK Information Commissioner (for UK individuals) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) for resolving disputes with Swiss individuals. As further explained in Annex I of DPF Principles, binding arbitration is available to address residual complaints not resolved by other means. Freshworks is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “The parties will comply with the terms of the DPA, which is incorporated into this Agreement by this reference, with respect to the provision and processing of Personal Data as defined in the DPA. Freshworks will use appropriate technical and organizational measures in the Services to protect the Customer Data from unauthorized access, processing, loss, or disclosure. Freshworks measures are designed to provide a level of security appropriate to the risk of processing the Customer Data within the Services. Customer understands that Freshworks and its Affiliates will process Customer Data in accordance with applicable data protection laws, this Agreement, including the DPA.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Where necessary (such as when we transfer data to service providers) we put in place appropriate contractual arrangements and security mechanisms (including but not limited to : Data Processing Addendum and Standard Contractual Clauses) to protect the Personal Data shared and to comply with our data protection, confidentiality and security standards and obligations. Further details can be provided upon request.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ This is true whether or not the transfer is within our group, or to a third party. With respect to Personal Data received or transferred to the United States, Freshworks is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. With respect to Personal Data subject to LGPD’s jurisdiction, Freshworks will also accomplish LGPD’s requirements for transfers of Personal Data to countries which do not have the same data protection laws. In certain situations, Freshworks. and/or its Group Companies may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, you can contact us at dpo@freshworks.com or via postal mail at Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403 at the attention of the Data Protection Officer with a copy to dpo@freshworks.com .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ b. Data Security and Privacy. The parties will comply with the terms of the DPA, which is incorporated into this Agreement by this reference, with respect to the provision and processing of Personal Data as defined in the DPA. Freshworks will use appropriate technical and organizational measures in the Services to protect the Customer Data from unauthorized access, processing, loss, or disclosure. Freshworks measures are designed to provide a level of security appropriate to the risk of processing the Customer Data within the Services. Customer understands that Freshworks and its Affiliates will process Customer Data in accordance with applicable data protection laws, this Agreement, including the DPA. ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ “Customer Data” means all electronic data, text, messages or other materials, including, without limitation, Personal Data of Users and End Users, submitted to the Services by Customer or its Users through Customer’s Account in connection with Customer’ use of the Services. “Data Processing Addendum” or “DPA” means the Freshworks’ Data Processing Addendum available at https://www.freshworks.com/data-processing-addendum/ as updated from time to time. “Documentation” means the then-current, generally available user documentation provided by Freshworks detailing the functionalities of the Services and Software. “End User” means any person or entity other than Customer or Customer’s Users with whom Customer interacts using the Services or Software. “Freshworks Technology” means: (i) the Services, Software, Mobile Apps, Documentation, Freshworks’ APIs, Freshworks’ website(s), and any content published on the Freshworks’ websites, (ii) any Freshworks training materials, support materials, templates, tools, methodologies, and (iii) any modifications or derivative works of the foregoing. “Marketplace User Terms” means the Freshworks Marketplace User specific terms located currently at https://www.freshworks.com/marketplace-user-terms/ , as updated from time to time. “Mobile Apps” means the Freshworks-branded Software applications provided by Freshworks to enable access to and use of the Services through mobile or other handheld devices (such as apps on iOS or Android devices). ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Freshworks commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “Where we process any other Personal Data, we will generally retain relevant Personal Data for up to three years from the date of our last interaction with you (and in compliance with our data protection obligations). We may then destroy such files without further notice or liability.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ 12. RETENTION OF PERSONAL DATA ” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Should you apply to work for us, we will retain data from your application for a limited period for record keeping and legal purposes. We may (subject to the laws in your jurisdiction) also retain your data in order to contact you if a role arises for which we think you would be suitable. Further information about this will be provided during the application process and we will ask for consent where necessary according to local law. The above examples may vary in some cases due to local laws, liability periods and mandatory retention requirements. For example, if certain information needs to be retained for longer according to local laws, regulations or because different legal limitation periods apply, then we will keep the Personal Data for these longer periods.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We will retain Personal Data only as long as is necessary for the purposes for which it is collected, as set out in this Notice. We will also retain it as necessary to comply with our legal obligations, for legal and litigation purposes, to maintain accurate financial and other records, deal with complaints, and enforce our agreements. Generally, in respect of Personal Data that we process in connection with the supply of our Services, we may retain your Personal Data for up to six years from the date of supply of the relevant Services and in compliance with our data protection obligations. We may then destroy such files without further notice or liability. Where we process any other Personal Data, we will generally retain relevant Personal Data for up to three years from the date of our last interaction with you (and in compliance with our data protection obligations). We may then destroy such files without further notice or liability. If any Personal Data is only useful for a short period (e.g., for a specific activity, promotion or marketing campaign), we will not retain it for longer than the period for which it is used by us. If you have opted out of receiving marketing communications from us, we will need to retain certain Personal Data on a suppression list indefinitely so that we know not to send you further marketing communications in the future. However, we will not use this Personal Data to send you further marketing unless you subsequently opt back in to receive such marketing. ” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “Freshworks will make Customer Data available for export for fourteen (14) days from the effective date of the closure of Customer’s Account due to: (i) the termination or expiration of this Agreement, or (ii) termination or expiration of the applicable SOF (“ Data Export Period ”). Customer may download or delete its Customer Data at any time during the Subscription Term. Where Customer Data is retained by Freshworks and can be exported, and provided that Customer is current on its payment obligations as described in Section 5, Customer may contact Freshworks within the Data Export Period at support@freshworks.com to have Freshworks export Customer’s Customer Data. Beyond such Data Export Period, Freshworks reserves the right to retain Customer data for up to three (3) months before deleting all Customer Data in the normal course of operation, except as necessary to comply with Freshworks legal obligations, maintain accurate financial and other records, resolve disputes, and enforce its agreements. Customer Data cannot be recovered once it is deleted.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ You have the right to give instructions regarding the retention, deletion and disclosure of your Personal Data after your death. You may designate a person to carry out these instructions. This person is then entitled to be informed of the directives and to request their implementation from us.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Subject to local laws, we may also use your personal data for the purpose of reviewing our equal opportunity profile in accordance with applicable legislation. We do not discriminate on the grounds of gender, race, ethnic origin, age, religion, sexual orientation, disability or any other basis covered by local legislation. All employment-related decisions are made entirely on merit. We will retain data from applications for a limited period for record keeping and legal (or, subject to local law, regulatory) purposes. We may (subject to the laws in your jurisdiction) also retain your data in order to contact you if a role arises for which we think you would be suitable. Further information about this will be provided during the application process and we will ask for consent where necessary according to local law.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Data Export and Retention . Upon termination or expiration of this Agreement or any SOF for any reason, Customer’s access to the Services, Software, Mobile Apps, APIs, and/or other Freshworks Technology will terminate. Freshworks strongly recommends that Customer export all Customer Data before Customer closes Customer’s Account. Freshworks will make Customer Data available for export for fourteen (14) days from the effective date of the closure of Customer’s Account due to: (i) the termination or expiration of this Agreement, or (ii) termination or expiration of the applicable SOF (“ Data Export Period ”). Customer may download or delete its Customer Data at any time during the Subscription Term. Where Customer Data is retained by Freshworks and can be exported, and provided that Customer is current on its payment obligations as described in Section 5, Customer may contact Freshworks within the Data Export Period at support@freshworks.com to have Freshworks export Customer’s Customer Data. Beyond such Data Export Period, Freshworks reserves the right to retain Customer data for up to three (3) months before deleting all Customer Data in the normal course of operation, except as necessary to comply with Freshworks legal obligations, maintain accurate financial and other records, resolve disputes, and enforce its agreements. Customer Data cannot be recovered once it is deleted. ” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We will retain data from applications for a limited period for record keeping and legal (or, subject to local law, regulatory) purposes. We may (subject to the laws in your jurisdiction) also retain your data in order to contact you if a role arises for which we think you would be suitable.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We determine the retention period for each of the categories of personal information listed above based on (1) the length of time we need to retain the information to achieve the business or commercial purpose for which it was obtained, (2) any legal or regulatory requirements applicable to such information, (3) internal operational needs, and (4) any need for the information based on any actual or anticipated investigation or litigation.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “Generally, in respect of Personal Data that we process in connection with the supply of our Services, we may retain your Personal Data for up to six years from the date of supply of the relevant Services and in compliance with our data protection obligations. We may then destroy such files without further notice or liability.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ d. Other Services and Software . Freshworks or other third parties may make available (for example, through the Freshworks Marketplace currently located at https://www.freshworks.com/apps/ ) or other forums, third-party products or services (“ Third-Party Services ”). These Third-Party Services may integrate with the Services and Software, but are not licensed by Freshworks pursuant to this Agreement, as they are governed by the third-party provider’s terms and conditions that accompany them, which Customer must separately accept, along with the Freshworks Marketplace User Terms. Freshworks does not warrant or support Third-Party Services. Freshworks is not responsible for any disclosure, modification, or deletion of Customer Data resulting from access by such third party. The Services, Software, and/or Mobile Apps, may contain features designed to interoperate with Third-Party Services, but Freshworks cannot guarantee the continued availability of such Third-Party Services and may cease supporting them without entitling Customer to any refund, credit, or other compensation, if, for example and without limitation, the Third-Party Service provider ceases to make the Third-Party Service available for interoperation with the corresponding Service or Software features in a manner acceptable to Freshworks. Customer understands Freshworks is not responsible for providing support for Third-Party Services and Freshworks is not responsible for any data hosting and/or data transfer practices followed by the providers of such Third-Party Services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Please see the “ advertising to you on social media and other platforms ” section for details of the lawful basis that we rely on to share your personal data with the Social Platforms. It is in our legitimate interests to further use your Personal Data to advertise our Services to other individuals that use those Social Platforms and who share similar interests and characteristics with you. If you are someone who has seen this advertising on a Social Platform, it is in our legitimate interests that the Social Platform uses the data that you have provided to it to advertise our Services, although please note that we do not receive this data and you should exercise your rights in respect of such data in accordance with the privacy notice of the relevant Social Platform.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 17. EFFECT OF MERGER OR ACQUISITION ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ In the event Freshworks goes through a business transition, such as a merger or acquisition by another company, or sale of all or a portion of its assets, Customers’ Accounts, Collected Data and Customer data will likely be among the assets transferred. A prominent notice will be displayed on our Websites to notify you of any such change in ownership or control and Customers will be notified via an e-mail.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share the categories of Identifiers, Geolocation Information (coarse location only), and Internet or Electronic Network Activity Information as described above with advertising partners. We determine the retention period for each of the categories of personal information listed above based on (1) the length of time we need to retain the information to achieve the business or commercial purpose for which it was obtained, (2) any legal or regulatory requirements applicable to such information, (3) internal operational needs, and (4) any need for the information based on any actual or anticipated investigation or litigation. Entities to whom we disclose information for business purposes are service providers, which are companies that we engage to conduct activities on our behalf. We restrict service providers from using personal information for any purpose that is not related to our engagement. We may disclose personal information that we collect or that you provide as described in this privacy notice:” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Other third parties - Occasionally, we may receive requests from third parties with authority to obtain disclosure of Personal Data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, or to establish, exercise or defend legal rights. We will only fulfil requests for Personal Data where we are permitted to do so in accordance with applicable law or regulation.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 4. WITH WHOM DO WE SHARE PERSONAL DATA? ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Analytics services, including entities that analyze traffic to and on our website and assist with identifying and communicating with potential customers. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ With third party service providers providing us with services, such as research and analytics, anti-spamming and anti-phishing services, marketing and data enrichment or for them to reach out to you on our behalf;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ With external recruiters, and related organizations such as third-party providers that undertake employee background checks on our behalf and on behalf of other entities within our Group Companies;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Auditing and accounting firms, such as firms that assist us in the creation of our financial records.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ With sponsors of contests for which you register;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ With auditors, lawyers, accountants and other professional advisers who advise and assist us in relation to the lawful and effective management of our organization and in relation to any disputes we may become involved in;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ California residents are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of personal information to third parties for their own direct marketing purposes in the preceding calendar year. We do not share your personal information with third parties for those third parties’ direct marketing purposes.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Purpose: Business administration and legal compliance. We may use your Personal Data to: a) respond to lawful requests by public authorities, including meeting national security or law enforcement requirements; b) when we believe that disclosure is necessary to protect our rights and/or to comply with a judicial proceeding, court order, police request or other legal process served on us; c) to protect the rights of third parties; and d) in connection with a business transition such as a merger, reorganization, acquisition by another company, or sale of any of our assets.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ With third party payment processors who process your credit card and other payment information for Freshworks but who are otherwise not permitted to store, retain or use such information;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Security vendors, such as entities that assist with security incident verification and response, service notifications, and fraud prevention.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Recruitment vendors that assist with the application process, including assessing candidate qualifications and providing the platform through which candidates submit their candidacy.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ To the following categories of service providers who are bound by law and contractual obligations to keep your personal information confidential. Service providers may use information that we share with them only for the purposes for which we disclose it to them and as otherwise permitted by law. Payroll services providers that assist us in calculating and disbursing your salary and other compensation.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Freshworks has developed a functionality that allows its customers to connect their Gmail mailbox using Oauth with our products. Connecting your Gmail mailbox to your Freshworks account allows Freshworks to associate your account with your personal information on Google, to see your personal information, including any personal information you have made available, to view your email address and access your emails in order to create them as a ticket in our products, and to transmit the Customer data to third-party applications listed on Freshworks’ Marketplace that you integrate with your Account. The connection will further allow you to respond to your emails directly from our product and to delete them once they are fetched into our product. Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models. Freshworks's use of information received from Google APIs will adhere to Google API Services User Data Policy's App's , including the Limited Use requirement.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “With Affiliates within Freshworks and companies that we will acquire in the future when they are made part of the Freshworks group – this may be for customer support, marketing, technical operations, account management or organizational purposes and to provide, enhance and improve the Services;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ From time to time, we may receive Personal Data about you from third party sources like databases and social media but only where we have checked that these third parties either have your consent to or are otherwise legally permitted or required to disclose your personal information to us. The types of information we obtain from such third parties include your name, e-mail address, postal address, location, designation, telephone number and we use the information we receive from these third parties to maintain and improve customer support experience, improve the accuracy of the records we hold about you and for our sales and marketing purposes. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We process Personal Data in the countries in which we are established, including the United States, the United Kingdom and the European Economic Area (“EEA”) and in other countries where third parties that we may use are based. You may refer to the Freshworks Data Hosting page here for more information about the locations in which the Hosted Data (i.e., that which we process as a Processor during the provision of our Services) is stored. When processing your Personal Data, we may need to share it with other third parties (including other entities within our Group Companies), as set out below. This list is non-exhaustive and there may be circumstances where we need to share Personal Data with other third parties: With third parties assisting Freshworks in providing our Customers with the Service(s) (“ Sub-Processors " listed here ). Our Sub-Processors are given access to Customers’ Account and Customer data only as reasonably necessary to provide the Service(s) and will be subject to confidentiality obligations in their service agreements;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Law enforcement or other government and regulatory agencies and bodies or other third parties as required by, and in accordance with, applicable law or regulation;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ When processing your Personal Data received by third parties for these purposes, we will rely on the consent that you have given such third parties to share data with us. Otherwise, subject to local law, our processing activities will rely on our legitimate interests to improve our customer service and ensure our marketing databases are accurate.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ IT vendors, such as entities that assist with website design, hosting and maintenance; data and software storage; and network operation.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Professional services consultants, such as firms that perform analytics, assist with improving our business, provide legal services, or supply project-based resources and assistance.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Please note that the right to opt out does not apply to our sharing of data with service providers, who are parties we engage to perform a function on our behalf and are legally and contractually obligated to use the data only for that function.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We also make available a Market Place platform where individuals can download applications developed by Freshworks or by third parties (the “ Applications ”). This Notice will apply to our processing of your Personal Data during your use of the Applications when the Applications are provided by us, and the Application shall include a link to this Notice. When Applications are provided by a third party, the privacy statement of the relevant third party will apply.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ a. Use of Third Parties for Payment Processing . Freshworks may use a third-party service provider to manage payment processing provided that such service provider is not permitted to store, retain, or use Customer’s payment account information except to process Customer’s payment information for Freshworks. Customer must notify Freshworks of any change in Customer’s payment account information, either by updating Customer’s Account or by e-mailing Freshworks at support@freshworks.com .” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ You have the right to be informed about the public and private entities with which we may share your Personal Data.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may share the categories of Identifiers, Geolocation Information (coarse location only), and Internet or Electronic Network Activity Information as described above with advertising partners.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “When Freshworks transfers Personal Data to a third party while acting as a controller, we retain full responsibility for ensuring that the third party‘s processing, in its role as a processor, complies with the DPF Principles. Freshworks shall remain liable under the DPF Principles if its processors process Personal Data in a manner inconsistent with the DPF Principles, unless Freshworks proves that it is not responsible for the event giving rise to the damage.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We will only share your Personal Data with the third-party providers of the Social Platforms, so that we can advertise our Services to you when you use those Social Platforms, where you have provided your consent or where it is otherwise in our legitimate interests to do so in order to promote our Services. Where this activity is undertaken through the use of Cookies, please see the “ Cookies and Similar Technologies ” section) to learn about the legal basis that we rely on. You can opt-out of our sharing of your personal information with the third-party providers by exercising your rights as a data subject as set out below.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ With third party partners for the purpose of assisting us in onboarding you and providing any further support needed to use our Services;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To other external parties when required by law or to protect Freshworks or other persons, as described in this privacy notice.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Freshworks’ assets or capital stock, whether as a going concern or as part of bankruptcy, liquidation or a similar proceeding, in which personal information held by Freshworks about our employees, workers and contractors is among the assets transferred. If this happens, the recipient of the personal information will continue to honor the promises made in this privacy notice, or else provide you notice of any changes.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ With third-party service providers that are assisting us with the operation and administration of events. If we are running an event in partnership with other organizations, we will share your Personal Data with such organizations for use in relation to the event;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ b. Assignment . Neither party may assign any of its rights or obligations hereunder, whether by operation of law or otherwise, without the other party’s prior written consent (not to be unreasonably withheld); provided, however, Freshworks may assign this Agreement in its entirety (including all SOFs), without Customer’s consent, to an Affiliate or in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets. Any attempted assignment in violation of this section will be null and void.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Such data used to personalize advertising will not be provided to the third-party providers of the Social Platforms for this purpose but please see the “ Cookies and Similar Technologies ” section for details of where we may share such data. This activity is also subject to the privacy choices you have elected to make on such Social Platforms.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If we are involved in a merger, reorganization or other fundamental corporate change with a third party, or sell/buy a business unit to/from a third party, or if all or a portion of our business, assets or stock are acquired by a third party, with such third party including at the due diligence stage;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “With third parties assisting Freshworks in providing our Customers with the Service(s) (“ Sub-Processors " listed here ). Our Sub-Processors are given access to Customers’ Account and Customer data only as reasonably necessary to provide the Service(s) and will be subject to confidentiality obligations in their service agreements;” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.