Hitchwell: ClickUp Tasks from Tickets: Privacy Policy
Effective date: October 1, 2026 Publisher: Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA Contact: hello@greatwork.company
This policy explains what information the Hitchwell app for Zendesk Support (the "App") processes, where it is kept, and your choices. It covers only the App, not Zendesk's or ClickUp's products, which are governed by their own policies.
1. Summary
- The App runs in your browser inside Zendesk Support, through the Zendesk Apps framework. Great Work LLC operates no server for it and receives no data from it.
- It reads from and writes to two places only: your Zendesk account (as the signed-in agent, with that agent's permissions) and your ClickUp Workspace (with the API token you provide).
- Your token is stored by Zendesk as a secure setting. Zendesk adds it to requests on their way to api.clickup.com; it is never sent to agents' browsers and Great Work never sees it.
- The App keeps nothing outside Zendesk and ClickUp: no copies, archives, caches or indexes, no browser storage, no background collection, no analytics or usage statistics, no cookies of its own, no export, and no AI services.
2. What the App processes, and why
| Data | Why | Where it lives |
|---|---|---|
| The ticket's id, subject, requester (name, email), update stamp and the Hitchwell field | To list the linked tasks and write links safely | Read from Zendesk into browser memory while the App is open |
| The ticket's latest 30 comments (author, date, text, attachment names and links), only when an agent opens the create form | So the agent can choose which comments go into the task | Read from Zendesk into browser memory |
| Linked tasks: name, status, assignees (name, email), due date, priority, location, latest comments | To show the tasks to the agent | Read from ClickUp into browser memory while the App is open |
| Spaces, folders, lists, list members and custom fields | For the list picker and the create form | Read from ClickUp into browser memory |
| A task the agent confirms: name, description (the ticket link, the agent's summary, the comments and attachment links the agent ticked, and the requester's name and email only if the agent ticks that), assignees, priority, due date, custom field values | The purpose of the App | Sent to the ClickUp list the agent picked |
| A comment the agent confirms, with the agent's name and the ticket link | The purpose of the App | Sent to the ClickUp task |
| Linked task ids and the status last logged on the ticket | So links and status changes survive between visits | Written to the Hitchwell ticket field in your Zendesk account |
An internal note and hitchwell_* tags for each action, with the agent's name | So your team can see what was done | Written to the ticket in your Zendesk account |
| The installation's plan name and settings (not the token), the agent's id, name, role and groups, and your account's agent count | To show the plan, check its agent band, apply who may take actions, and name the agent | Read from Zendesk |
When the sidebar closes, everything it held in memory is gone. What the App wrote stays in your Zendesk account and your ClickUp Workspace under your control and their retention settings.
3. What Great Work LLC receives
Nothing from the App. If you email us for support, we receive what you send (we ask you not to send customer data, card details, passwords or API tokens) and keep it in our email system for as long as needed to help you, at most 24 months. Billing for the App is handled by Zendesk through Stripe; we receive the subscription records Stripe provides to sellers (your Zendesk domain, the plan, payment status and billing contact), which we keep as long as tax and accounting law requires.
4. Sharing
We do not sell, rent or share personal information. The App sends data only to your Zendesk account and to the ClickUp API. We have no subprocessors for the App itself.
5. AI and model training
The App uses no AI services, and no data processed by the App is used to train any model.
6. Security
The App has no server or database to breach and installs nothing in ClickUp. It loads the Zendesk Apps framework from Zendesk's CDN. ClickUp requests go through Zendesk's proxy over HTTPS with the token in a secure setting that may only be used in a request header, and only for api.clickup.com. ClickUp tokens can't be limited to some actions, so the App limits actions itself: admins choose who may act, each action type can be switched off, and every write needs a confirmation. Report a security issue to hello@greatwork.company; we treat it as urgent.
7. Your choices and rights
- Admins choose who may take actions and which actions exist, and can uninstall at any time. Uninstalling deletes the stored token and the Hitchwell ticket field; you can also regenerate the token in ClickUp. Notes and tags on tickets and everything in ClickUp stay until you delete them.
- Requests about personal data in your Zendesk account or ClickUp Workspace go to your administrator, who controls that data. Questions about this policy: hello@greatwork.company.
- If you are in the EEA, UK or California, you have rights to access, correct and delete personal information we hold about you (in practice, support emails and billing records). Write to us.
8. Changes
We will post changes here with a new effective date and, for material changes, email the billing contact of each paying account at least 14 days before they apply.