Privacy

This notice explains what we collect when you use AppControler, why we collect it, and how to ask us to delete it.

Account data

When you sign in with Google, we receive your name, email address, and profile photo from the standard OpenID sign-in scopes (openid, email, and profile). We store them so we can recognize you on later visits and send product mail you turn on, such as renewal reminders.

Google Workspace data

If a Workspace admin connects their directory, we request three read-only Admin SDK scopes:

• admin.directory.user.readonly — list users in the directory (name and email) so we can show who authorized an app.
• admin.directory.domain.readonly — read the Workspace domain so the scan is tied to the right organization.
• admin.directory.user.security — read the third-party OAuth apps each user has authorized, and the permission scopes on those grants. This is the inventory the product shows.

We store app names, the users who authorized them, and the scopes on those grants. We use that list to show connected apps, score AI tools, and support approve, review, or block decisions an admin makes in the product.

The Workspace scan does not read Gmail message bodies, Drive file contents, Calendar events, or contacts. We do not change OAuth grants in Google on your behalf. Disconnecting the workspace in AppControler stops further sync, and we discard the tokens used for that connection.

Google Calendar

Connecting Google Calendar is optional and separate from the Workspace scan. If you turn it on in Settings, we request https://www.googleapis.com/auth/calendar.events. We use that permission only to add all-day renewal events to the primary calendar of the Google account you connect, for contracts you already stored in AppControler. We do not read your other calendar events to build the app inventory, and this scope is not requested during the Workspace scan. You can turn the connection off in Settings.

Microsoft 365 directory scans and Outlook calendar sync are not available yet. This notice will describe those permissions before either one can be turned on.

AppControler’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data. We do not use it for advertising, to train generalized AI models, or to build profiles unrelated to showing an admin their own connected apps.

Other data you give us

If an admin uploads a contract PDF, we store that file and the dates and commercial terms extracted from it so renewal reminders can sit next to the tools you keep. Upload only documents you are allowed to store with us.

Who we share it with

We use service providers to run the product: a database host for the inventory and contracts, and an email provider for reminders you turn on. They process data only to provide that service. We do not sell personal data and we do not share workspace identity data with advertisers.

How long we keep it, and deletion

We keep account and workspace data while the account is active. To delete your account and the workspace data tied to it, email [email protected]. We will confirm when the deletion is done. You can also revoke AppControler’s access at any time from your Google Account permissions or the Workspace Admin console.

We will update this notice if what we store changes in a material way.