Personal Data Inventory for Khoros Subscription Services
This document captures a complete inventory of personal data points used throughout Khoros products. Khoros relies on performance of a contract and/or legitimate interests in order to process the personal data contained in this document.
Please scroll down to the charts below or simply click on one of the following product links to be redirected to the corresponding chart:
MARKETING
Data Element | Source |
Subprocessor Recipients (If blank, none) Country Locations of subprocessors can be found here |
Retention/Deletion |
Campaigns/Initiatives
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Roles
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Approvals
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Labels
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Credentials
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Notifier
|
User-created | Aurora - indefinitely until 30 days post-contract | |
User Profile
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Directory Service Customer/Company
|
Company Administrator-created | Aurora - indefinitely until 30 days post-contract | |
FINEX (Financial Industry Export)
|
Generated nightly by the marketing system. | AWS filesystem - 1 day (deleted and regenerated nightly) | |
Suite navigation data
|
Captured by Pendo as users navigate the product suite. | Indefinitely at Pendo until 30 days post-contract) | |
Promotion Accounts
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Promotions
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Care analytics data
|
Generated by the Marketing system as user actions occur. |
Aurora - indefinitely until 30 days post-contract Redshift - 30 days |
|
Care Rules
|
User-created | Aurora - indefinitely until 30 days post-contract | |
whodex profiles
|
Sourced from supported social networks via API | Aurora - indefinitely until 30 days post-contract | |
whodex profile author notes
|
User-created | Aurora - indefinitely until 30 days post-contract | |
export logs
|
Generated by the Marketing system as user actions occur. | Kibana - 30 days | |
analytics dashboards
|
User-created | Aurora - indefinitely until 30 days post-contract | |
plans
|
User-created | Aurora - indefinitely until 30 days post-contract | |
messages
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Content Center assets
|
User-created | Aurora - indefinitely until 30 days post-contract | |
auto-labeling rules
|
User-created | Aurora - indefinitely until 30 days post-contract | |
comments
|
User-created | Aurora - indefinitely until 30 days post-contract | |
replies
|
User-created | Aurora - indefinitely until 30 days post-contract | |
retweets
|
User-created | Aurora - indefinitely until 30 days post-contract | |
streams
|
User-created | Aurora - indefinitely until 30 days post-contract | |
Stream Entities
|
Sourced from supported social networks via API. |
Aurora - indefinitely until 30 days post-contract Cassandra - 7 days Memcached - 1 day |
|
User
|
Company Administrator-created | Aurora - indefinitely until 30 days post-contract | |
visualizations
|
User-created | Aurora - indefinitely until 30 days post-contract | |
spaces
|
User-created | Aurora - indefinitely until 30 days post-contract | |
spotlight reports
|
User-created | Aurora - indefinitely until 30 days post-contract | |
post search results
|
Sourced from supported social networks via API | Cassandra - indefinitely until 30 days post-contract | |
Stream Items
|
Sourced from supported social networks via API | Cassandra - indefinitely until 30days post-contract | |
Influencers
|
User-created | Aurora - indefinitely until 30 days post-contract | |
TeamQueue data |
Generated by the Marketing system as user actions occur. | Cassandra- 30 days post contract |
CARE
Data Element | Source |
Third-Party Recipients Country Locations can be found here |
Retention/Deletion |
Id Name Screenname Profile picture Bio Location |
TWITTER: Consumer data is retrieved through Twitter APIs after the company authenticates their Twitter Handle(s) with Care. All consumer data is subject to Twitter's Terms of Service. | Yes | Deleted within 30 days of end of customer contract. Tweets deleted in Twitter will also be deleted in Care based on Twitter notification. |
Id Name Picture First name Last name |
FACEBOOK: Consumer data is retrieved through Facebook APIs after the company authenticates their Facebook Page(s) with Response. All consumer data is subject to Facebook's Terms of Service. | Yes | Deleted within 30 days of end of customer contract. User comments deleted in Facebook will also be deleted in Care based on Facebook notification. |
Id Username |
INSTAGRAM: Consumer data is retrieved through Instagram APIs after the company authenticates their Instagram Handle(s) with Response. All consumer data is subject to Instagram's Terms of Use. | Yes | Deleted within 30 days of end of customer of contract. |
Id | GOOGLE BUSINESS MANAGER: Consumer data is received through streaming updates after company authenticates Business messages with Care. All consumer data is subject to Google's Business Messages Terms of Service. | Yes | Deleted within 30 days of end of customer contract. |
Name Username |
GOOGLE MY BUSINESS: Consumer data is received through Google MyBusiness APIs after company authenticates with Care. All consumer data is subject to Google's Terms of Service. |
Yes | Deleted within 30 days of end of customer contract. |
Name | RSS: Consumer data is received through RSS APIs after company authenticates with Care. | Yes | Deleted within 30 days of end of customer contract. |
Id Display name Profile image url |
YOUTUBE: Consumer data is retrieved through YouTube APIs after the company authenticates their YouTube Channel(s) with Response. All consumer data is subject to YouTube's Terms of Service. | Yes | Deleted within 30 days of end of customer contract. |
Id |
APPLE BUSINESS CHAT:Consumer data is received through streaming updates after company authenticates Apple Business Chat with Care. All consumer data is subject to Apple's Terms of Service. |
Yes | Deleted within 30 days of end of customer contract. |
Id |
WEB MESSANGER (SMOOCH): Within a secure chat, provided by Sunshine Conversations, consumers will share unstructured PII (i.e. the information will be shared within a chat conversation). This data will be ingested into Care. | Yes | Deleted within 30 days of end of customer contract. |
Id Name |
WECHAT: Consumer data is retrieved through WeChat's APIs after the company authenticates their WeChat Account(s) with Response. All consumer data is subject to WeChat's Terms of Service. | Yes |
Deleted within 30 days of end of customer contract. |
Phone number | SMS: Consumer data is retrieved through Twilio APIs after the company authenticates their SMS numbers with Care. All consumer data is subject to Twilio's Terms of Service. | Yes |
Deleted within 30 days of end of customer contract. |
Phone number |
WHATSAPP: Consumer data is retrieved through Smooch APIs after the company authenticates their WhatsApp numbers with Care. All consumer data is subject to WhatsApp's Terms of Service. | Yes |
Deleted within 30 days of end of customer contract. |
Name |
GOOGLE PLAY STORE REVIEWS | Yes |
Deleted within 30 days of end of customer contract. |
Id |
NETBASE | Yes |
Deleted within 30 days of end of customer contract. |
Name |
IOS APP STORE REVIEWS | Yes |
Deleted within 30 days of end of customer contract. |
Id |
LINKEDIN: Consumer data is retrieved through LinkedIn APIs after the company authenticates their LinkedIn Page(s) with Response. All consumer data is subject to LinkedIn's Terms of Service. | Yes |
Deleted within 30 days of end of customer contract. |
|
RADIAN 6: This is a general listening integration that can bring in content from all of the other networks listed. We should no longer be using this provider. | Yes |
Deleted within 30 days of end of customer contract. |
Id |
YELP: Consumer data is retrieved through LinkedIn APIs after the company authenticates their Yelp Location(s) with Response. All consumer data is subject to Yelps Terms of Service. | Yes |
Deleted within 30 days of end of customer contract. |
Id |
KHOROS COMMUNITY | Yes |
Deleted within 30 days of end of customer contract. |
KHOROS BOT
Data Element | Source |
Third-Party Recipients Country Locations can be found here |
Retention/Deletion |
|
Facebook messenger |
|
|
|
|
|
|
|
Web Widget |
|
|
|
Khoros |
|
|
|
Twilio |
|
|
|
Analytics metadata |
|
|
COMMUNITY
Data Element | Source |
Third-Party Recipients Country Locations can be found here |
Retention/Deletion |
|
SSO - from SSO identity provider (usually customer's propitiatory identity system via SSO cookie). Local with migration - from PS team or Administrator importing the info Local without migration - from users through initial registration |
Yes |
Mysql, Elasticsearch, Cassendra - indefinitely. Redis - 24 hours |
|
Created during the first initial interaction to the system, may it be SSO or import or registration | Yes |
Mysql, Elasticsearch, Cassendra - indefinitely. Redis - 24 hours |
Except required custom fields, all are optional not related to any feature supported |
Entered by user either through initial registration or sub-sequential interaction with the community. For custom personal data fields, it could also possible be from SSO cookie. |
Yes |
Mysql, Elasticsearch, Cassendra - indefinitely. Redis - 24 hours |
Supported Feature: Twitter Integration |
Entered by user either through initial registration or sub-sequential interaction with the community | Yes | Mysql - indefinitely. |
Supported Feature: Facebook connect and integration |
Entered by user either through initial registration or sub-sequential interaction with the community | Yes | Mysel - indefinitely. |
|
Entered by user either through initial registration or sub-sequential interaction with the community | Yes |
Mysql - indefinitely. Redis - 24 hours |
|
From the http requests to the community | Yes |
Mysql - indefinitely. Redis - 24 hours |
Community User Metrics
|
Created by the community | Yes |
Mysql, Elasticsearch indefinitely. Redis - 24 hours |
CX INSIGHTS
Data Element |
Source |
Third-Party Recipients Country Locations can be found here |
Retention/Deletion |
Audio Recordings:
|
Audio files provided by Khoros clients |
|
Earlier of 24 months after the audio recording was created or Agreement termination date |
Audio Recordings:
|
Audio files provided by Khoros clients |
|
Earlier of 24 months after the audio recording was created or Agreement termination date |
Conversation transcripts:
|
Text-based conversation transcripts provided by Khoros clients |
|
Earlier of 24 months after the audio recording was created or Agreement termination date |
Product Reviews and Surveys:
|
Text-based product/service review data provided by Khoros clients |
|
Earlier of 24 months after the audio recording was created or Agreement termination date |
Social Media Posts:
|
From social networks via API, provided by Khoros clients, or third-party data aggregation sources |
|
Earlier of 24 months after the audio recording was created or Agreement termination date |
Web Session Data:
|
Web session recording applications |
|
Earlier of 24 months after the audio recording was created or Agreement termination date |
User Access Data:
|
User created activity |
|
Three (3) months from the date of the user session |
User Access Data:
|
User created activity |
|
Indefinitely at Zendesk until 90 days post-contract termination |
User Access Data:
|
User created activity |
|
Twelve (12) months from the date of the user session |
User Access Data:
|
User created activity |
|
Indefinitely at Pendo.io until 30 days post-contract termination |