Privacy Policy - Workspace Multi Tenant PoC

This policy explains what Workspace Multi Tenant PoC accesses when a Google Workspace administrator installs it, and how that information is used. This app is currently operated as a proof of concept and is not offered as a public commercial product.

What is accessed

Once a domain administrator installs the app, it can read the following categories of information for that domain only:

Active security alerts and their status, severity, and type
Admin console audit events and login activity
The user directory, including name, org unit, suspension status, and two step verification status
Gmail configuration settings such as forwarding rules, mail delegation, and send as aliases

What is never accessed

The app never requests or reads the content of any email message, attachment, or file. It does not request access to Google Drive, Calendar, or Chat. Every request the app makes is read only, meaning no setting or record is ever changed by the app.

How the information is used

Information read by the app is used only to demonstrate and validate the connection described on the home page of this site. It is not sold, shared with advertisers, or used for any purpose outside of this proof of concept.

Where the information is stored

Data retrieved during testing is stored only long enough to validate that the connection is working, and is kept in a private, access controlled location. It is not published or made available to any third party.

Data retention

Because this is a proof of concept rather than an ongoing service, retrieved data is deleted once testing for a given domain is complete, unless the domain administrator requests otherwise in writing.

Revoking access

A domain administrator can remove this app or revoke its access at any time from the Google Workspace Admin Console, under Security, Access and data control, and API controls. Removing access immediately stops any further requests from the app for that domain.

Contact

Questions about this policy can be sent to the address listed on the support page.