Tidio
Tidio · Chat assistant · US · www.tidio.com
services/tidio.yamlVendor data-handling terms
The policy does not say whether visitor conversations or the knowledge sources uploaded to the Lyro agent are used to improve Tidio's models.
“Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.”
“provide services (duration of the agreement), but if the processing is necessary to fulfill a legal obligation by Tidio, your personal data will be processed for a period of time resulting from generally applicable laws, in particular tax law and accounting regulations.”
“We mainly process the data you submit within the EEA and the servers located there. / Note, however, that TIDIO LLC, as the entity entering into the Agreement with you, is a U.S.-based entity, and therefore some of your data may be transferred from the EEA and/or the United Kingdom and processed in the United States.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.tidio.co | api | observed |
| tidio.com | app | observed |
Assessment
Reasoning: A live-chat and AI customer-service agent for e-commerce. EEA processing is a plus. The policy does not say what Tidio does with visitor conversations or the help-centre content fed to Lyro, and the US entity receives some data. Conversations contain customer personal data by design.
Flags: Training-use of conversations and knowledge sources not stated · Some processing by the US entity · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Google API, retention and transfer terms verified against the Tidio privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.