Privacy Policy

Last updated: July 2026

This policy explains what data LicenSweep ("the Service") accesses, stores, and how it's used.

1. What we access

When your administrator connects your Microsoft 365 tenant, the Service reads, via Microsoft Graph:

• Purchased and consumed license counts (subscribedSkus)
• The Microsoft 365 activity usage report, which includes user principal names or anonymized identifiers (depending on your tenant's reporting privacy settings) and last-activity dates per service

We do not access email content, file content, Teams messages, calendar data, or any data beyond license assignment and activity timestamps.

2. What we store

We store your tenant ID, connection status, authorized dashboard memberships, billing identifiers, notification preferences, and summary results needed to operate the Service. We do not store the full Microsoft activity report or user-level report data persistently — it is fetched fresh from Microsoft Graph when a report runs.

3. What we don't store

We never receive, request, or store your Microsoft 365 password or any user's login credentials. Authentication to your tenant happens entirely through Microsoft's own OAuth consent flow, using an application-level token — no user credentials pass through our systems at any point.

4. Payment information

Billing is processed by a third-party payment processor (Stripe). We do not store your card details on our own servers.

5. Data sharing

We do not sell, rent, or share your tenant's data with third parties, except as required to operate the Service (e.g., our cloud hosting provider) or as required by law.

6. Data retention and deletion

The disconnect control stops Microsoft report access while preserving billing and account history. Revoking the enterprise application separately in Microsoft 365 prevents future Graph access. To request deletion of stored account and tenant records, email support@licensweep.com.

7. Security

Data in transit is encrypted via HTTPS/TLS. Access tokens used to query Microsoft Graph are requested fresh for each session and are not persisted to disk.

8. Changes to this policy

We may update this policy periodically. Material changes will be reflected with an updated "Last updated" date above.

9. Contact

Email support@licensweep.com for privacy questions or deletion requests. The Service operator's formal legal name and postal address must be added here before accepting paid public signups.

This is a general-purpose template and is not a substitute for advice from a qualified attorney, particularly regarding GDPR, CCPA, or other regional data-protection requirements that may apply to your customers.