Privacy Policy
Effective Date: December 15, 2024
This Privacy Policy describes how Prun ("we," "our," or "us") collects, uses, and protects your information when you use our Microsoft License optimization platform.
Information We Collect
Account Information
When you create an account, we collect:
- Name and email address
- Company information
- Job title and role
- Contact preferences
Microsoft 365 Data
Through your authorized Microsoft 365 connection, we access:
- License assignment information
- User activity logs and usage patterns
- Subscription details and billing information
- User directory information (names, departments, status)
- Application usage statistics
Usage and Analytics Data
We automatically collect:
- Platform usage patterns and feature utilization
- Performance metrics and optimization results
- Browser type, device information, and IP address
- Cookies and similar tracking technologies
How We Use Your Information
License Optimization
- Analyze Microsoft 365 usage to identify optimization opportunities
- Detect inactive users and unused licenses
- Generate cost savings recommendations
- Automate license adjustments with your approval
Service Provision
- Provide dashboard analytics and reporting
- Send notifications about optimization opportunities
- Deliver customer support and technical assistance
- Process payments and billing
Platform Improvement
- Enhance our optimization algorithms
- Develop new features and functionality
- Conduct security monitoring and fraud prevention
- Analyze platform performance and reliability
Data Security and Protection
Security Measures
We implement industry-standard security practices:
- End-to-end encryption for data transmission
- AES-256 encryption for data at rest
- Multi-factor authentication and access controls
- Regular security audits and penetration testing
- Industry-standard security protocols
Microsoft Integration Security
Your Microsoft 365 connection is secured through:
- OAuth 2.0 authentication with Microsoft Azure AD
- Minimal required permissions (read-only for most data)
- Regular token refresh and validation
- Ability to revoke access at any time
Data Sharing and Third Parties
We Do Not Sell Your Data
We never sell, rent, or trade your personal or Microsoft 365 data to third parties.
Limited Sharing
We may share aggregated, anonymized data with:
- Service providers who assist with platform operations
- Analytics providers for platform improvement (no personal data)
- Legal authorities when required by law
Microsoft Partnership
As a Microsoft partner, we may share aggregated usage statistics with Microsoft to improve their services, but never personal or company-specific information.
Your Rights and Choices
Access and Control
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Export your data in a standard format
- Revoke Access: Disconnect Microsoft 365 integration at any time
Communication Preferences
You can control:
- Email notifications and alerts
- Marketing communications
- Platform update notifications
- Optimization recommendations
Data Retention
We retain your data only as long as necessary for:
- Active accounts: Duration of service plus 90 days
- License optimization data: 24 months for trend analysis
- Billing records: 7 years as required by law
- Support tickets: 3 years for service improvement
You can request early deletion of your data by contacting our support team.
International Data Transfers
Your data may be processed in:
- United States (primary data centers)
- European Union (EU users)
- Other regions where Microsoft Azure operates
We ensure appropriate safeguards through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
- Microsoft's Global Data Protection Addendum
Changes to This Policy
We may update this Privacy Policy to reflect:
- Changes in our data practices
- Legal or regulatory requirements
- New features or services
We will notify you of significant changes via email or platform notification at least 30 days before they take effect.
Contact Information
For questions about this Privacy Policy or your data:
Prun Privacy Team
[Your Business Address]
[City, State ZIP]