Privacy Policy — Reply with Invoice

How the Reply with Invoice extension for Zoho Desk handles data. In short: it reads invoices from your own Zoho Books organization, writes the selected invoice PDF into your own Desk reply, and stores nothing.

1. Summary

• We do not collect, receive, or store any customer, ticket, or invoice data.
• The extension runs inside your Zoho Desk account and talks only to your own Zoho Books organization.
• No analytics, no tracking, no cookies, no advertising identifiers.
• No data is transferred to 24Bit System or to any third party.

2. What the extension reads

When an agent opens a ticket, the extension reads the following from the Zoho Desk session the agent is already signed in to:

• the requester email address on the open ticket;
• the ticket identifier, used only to place the attachment on the correct reply.

It then sends a read-only request to the Zoho Books organization configured for your installation, asking for invoices matching that email address. The response contains invoice number, date, due date, total, status, and — when an invoice is chosen — the invoice PDF.

3. Zoho authorization scope

The extension requests one scope: ZohoBooks.invoices.READ. This permits listing invoices and downloading an invoice PDF. It does not permit creating, editing, deleting, or sending invoices, and it grants no access to any other Zoho Books module or to any other Zoho service.

The authorization is granted through Zoho's own connection mechanism against a Zoho account you control. We never see or hold your Zoho credentials or OAuth tokens.

4. What the extension writes

When an agent clicks Attach to reply, the selected invoice PDF is placed in the reply editor of the open ticket in your own Zoho Desk account — exactly as if the agent had uploaded the file. The reply is not sent; sending remains a manual action by the agent.

Nothing else is written to Zoho Desk or Zoho Books.

5. Storage and retention

The extension has no database, no server-side storage, and no logs of customer data. The invoice PDF is held in the browser tab's memory only between the moment it is fetched and the moment the reply is sent or discarded.

Your own Zoho Desk ticket and Zoho Books records are governed by your agreement with Zoho, not by this policy. Retention of those records is controlled by you inside your Zoho account.

6. Sharing and transfers

We do not sell, rent, or share data. There is no sub-processor, no external analytics service, and no server operated by 24Bit System in the request path: the extension's requests go from the agent's browser, through Zoho Desk's own request proxy, to your Zoho Books API endpoint over HTTPS.

Because no data reaches us, no international transfer of personal data by 24Bit System takes place in connection with this extension.

7. Security

• All traffic uses HTTPS to Zoho's own endpoints.
• Access to invoices is limited to the agents in your Zoho Desk organization, using their existing Zoho permissions.
• The extension ships no credentials, no API keys, and no embedded tokens.

8. Legal basis and roles

Your organization is the controller of the ticket and invoice data processed in its Zoho accounts. 24Bit System acts only as the provider of the software that runs inside that environment; it does not receive the data. Where data protection law requires a legal basis for the processing described above, it is your organization's legitimate interest in responding to its own customers' requests, under your own accountability as controller.

9. Your rights

Because the data stays in your Zoho accounts, requests from data subjects (access, correction, erasure) are handled by your organization inside Zoho Desk and Zoho Books. If you believe the extension itself is involved in a data protection issue, contact us using the details below and we will assist.

10. Children

The extension is a business support tool and is not directed at children. It does not knowingly process data of children beyond what already exists in your own business records.

11. Changes to this policy

If a future version of the extension changes how data is handled — for example by adding optional caching — this page will be updated before that version is released, and the effective date above will change.

12. Contact

24Bit System, a brand of Two Four Bit Systech India Private Limited
Email: [email protected]
Support: support.24bitsystem.com
Website: 24bitsystem.com

The general company privacy policy, covering the website and our other services, is at 24bitsystem.com/privacy-policy.