PII Detector for Intercom

Find and redact personal data in conversations, without leaving the Inbox.

Customers paste card numbers, national ID numbers and personal email addresses into support conversations. They rarely mean to, and by the time anyone notices the data is sitting in a thread that everyone with Inbox access can read.

PII Detector reads the conversation your teammate already has open and reports what personal data is in it — which messages, what kind, and how sensitive. One click redacts the offending message through Intercom's own redaction API.

Installing

  1. Install the app from the Intercom App Store and approve the permissions it asks for.
  2. Open any conversation in your Inbox.
  3. In the right-hand sidebar, scroll to Apps and add PII Detector.

It stays in the sidebar for every conversation you open after that.

Using it

The panel scans the conversation as it loads and lists what it found, grouped by type with a count and a risk level. Where Intercom will accept a redaction, each flagged message gets a Redact this message button.

After a redaction the panel re-reads the conversation and re-renders from what it now actually contains, rather than reporting what the redaction was supposed to have done.

What it detects

Email addresses, phone numbers, credit and debit card numbers (validated, not merely shaped like one), national insurance and social security numbers, passport numbers, IP addresses, dates of birth, postal addresses and URLs.

Three limits worth knowing

It redacts whole messages Intercom's redaction API removes an entire message; there is no way to remove only the sensitive part of one. Redaction is permanent and cannot be undone, by us or by Intercom.
It finds patterns, not everything Personal data takes forms no pattern will match. A clean result is not proof a conversation is clean — treat this as a control alongside your own process, not instead of it.
Very long conversations are read in part Intercom returns at most 500 messages per conversation and will not return more. Past that the panel says how many of how many it read, rather than implying it read all of them.

What it does with your data

Conversation text is read in memory to run the scan and is never written to disk, logged, or sent anywhere else. Matched values are never displayed back — the panel reports that a card number was found, never the digits. The only thing stored is your workspace's access token, which is deleted when you uninstall.

Full detail in the privacy policy and terms of service.

Uninstalling

Remove the app from your Intercom workspace at any time. That revokes our access immediately. Messages already redacted stay redacted — that is Intercom's own feature and is not reversible.

Support

Email support@clonepartner.com. Include your workspace name and, if it is about a particular conversation, roughly when it happened.