This Privacy Policy describes how Admin Report Generator ("we", "our", or "the app") collects, uses, and protects information when you use our Google Workspace analytics and reporting service. The app is intended for Google Workspace administrators and uses Google APIs in accordance with Google API Services User Data Policy, including the Limited Use requirements.

1. Information We Access

To provide report generation and analytics, the app requests access to the following Google data, only with your consent (OAuth). We use read-only access for all data except where we need to create the report (e.g. creating a Google Sheet in your My Drive). The list below summarizes the main categories; the exact scopes are shown when you sign in.

• Account identity (read-only): your email address and basic profile (openid, email) to identify the administrator and associate reports with your domain.
• Google Admin SDK (read-only): domain users, groups, customer and domain info; usage reports (e.g. Gmail sent/received counts, Drive and Shared Drive storage); audit logs; user security and related admin data to build aggregate reports.
• Gmail-related data (read-only): when applicable, usage and security-related metrics (e.g. phishing, malware, suspicious activity) via Admin SDK and/or BigQuery, only for generating the admin report. We do not read the content of your emails.
• Google Drive (read and create): to create and write the report spreadsheet in your My Drive (folder "Damson Cloud/Admin report"). We do not access your other files beyond what is required for the report.
• Gmail send: only if you opt in to receive the report summary by email; we use it solely to send that email to you.

2. How We Use This Information

We use the data obtained through Google APIs solely to:

• Generate and display admin reports (e.g. usage, security metrics) for your Google Workspace domain.
• Create the report as a Google Sheet in your My Drive (folder "Damson Cloud/Admin report") and, if you opt in, send report summaries by email.
• Authenticate you and manage your session (e.g. cookie for signed-in state) so that only you can run and view reports.

We do not use Google user data for advertising, selling or transferring data to third parties, or for any purpose other than providing and improving the app's reporting features.

3. Data Storage and Retention

OAuth tokens are stored securely (e.g. in Google Cloud Secret Manager) so that the app can generate reports on your behalf: (1) when you use the app in the browser, so you do not have to sign in again on every visit or every report; (2) when reports are run on a schedule (e.g. via Cloud Scheduler). The report is created as a Google Sheet on Google Drive under your or your organization's control. We do not retain copies of your report content on our own servers.

4. Data Sharing

We do not store your report content or other client data on our systems. We have nothing to share with third parties. We do not sell, rent, or share your Google user data.

5. Your Choices and Rights

You can revoke the app's access at any time via your Google Account permissions. You may also stop using the app and request deletion of stored tokens; we will process such requests in line with applicable law and our systems' capabilities.

6. Security

We use industry-standard measures to protect the data we process (e.g. secure storage of credentials, HTTPS). Google APIs are used in accordance with Google's security and data protection practices.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will be revised when we make material changes. Continued use of the app after changes constitutes acceptance of the updated policy.

8. Contact

For questions about this Privacy Policy or our use of Google user data, contact us at damsoncloud.com or reach out to the manager with whom you discussed the implementation of this app.