1. Introduction

The DriveLynk application is committed to protecting the privacy and security of our customers’ information.

This Privacy Policy explains how the Application processes information when interacting with Microsoft SharePoint and Microsoft 365 environments.

The Application is offered through Microsoft Marketplace and is designed to operate on customer-authorized SharePoint content while maintaining strict privacy and security controls.

2. Data We Access

The Application may receive permission to interact with customer SharePoint sites, document libraries, folders, and metadata as required to deliver its functionality.

The Application is designed under a least-privilege model and only requests permissions necessary for operation.

Depending on the customer’s configuration, the Application may access:

• SharePoint file metadata
• Site metadata
• Document URLs
• Folder structure information
• User identifiers necessary for authentication and authorization

3. No Access to Customer Content

A core design principle of the Application is that we do not view, inspect, analyze, store, or retain customer documents or business content.

Specifically:

• We do not read document contents.
• We do not download customer files to our systems.
• We do not maintain copies of customer documents.
• We do not sell customer information.
• We do not use customer information for advertising.
• We do not use customer data to train machine learning or artificial intelligence models.

All customer content remains within the customer’s Microsoft 365 tenant.

4. Data Storage

The Application does not permanently store customer SharePoint content.

Any temporary processing information required to provide the service is:

• Encrypted in transit using TLS 1.2 or higher.
• Automatically deleted after processing.
• Not retained longer than required to complete the requested operation.

5. Data Ownership

Customers retain full ownership of their data at all times.

The Application does not acquire any ownership, rights, or intellectual property interests in customer data, documents, files, or content.

6. Security Measures

We implement industry-standard security controls, including:

• Encryption in transit
• Role-based access controls
• Least-privilege authorization
• Security monitoring and logging
• Regular security updates and vulnerability management

Access to operational systems is restricted to authorized personnel with a legitimate business need.

7. Use of Microsoft Services

The Application relies on Microsoft Azure, Microsoft Graph, Microsoft SharePoint, and Microsoft 365 services for authentication and connectivity.

Customer data continues to be governed by Microsoft’s applicable privacy, security, and compliance commitments.

8. Data Sharing

We do not sell, rent, trade, or disclose customer data to third parties.

We will only disclose information when:

• Required by applicable law;
• Required to respond to valid legal requests; or
• Necessary to protect the security and integrity of the service.

9. International Data Transfers

Where applicable, information is processed using Microsoft Azure services and associated infrastructure.

Appropriate technical and organizational safeguards are implemented to protect information during any lawful transfer.

10. Customer Rights

Customers may:

• Request information regarding data-processing activities.
• Request deletion of application-related records.
• Revoke application permissions at any time through Microsoft Entra ID or Microsoft 365 administration tools.
• Stop using the Application at any time.

11. Data Retention

The Application retains only operational and audit information necessary for:

• Security monitoring
• Troubleshooting
• Compliance obligations

No customer document content is retained.

Audit logs are retained only for the period required to maintain service security and compliance.

12. Children’s Privacy

The Application is intended exclusively for business and enterprise use and is not directed toward children.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

Material changes will be communicated through our website, customer communications, or Microsoft Marketplace listing updates.