1. Introduction

SeatPrune ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our license auditing and cost optimization service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Email address
Name
Password (encrypted)
Organization name

2.2 Tenant Data

When you connect your Microsoft 365 tenant, we access and store:

User information (names, email addresses, job titles, departments)
License assignments and subscription details
Service usage data (sign-in activity, app usage statistics)
Security information (MFA status, group memberships, directory roles)

2.3 Usage Data

We automatically collect information about how you use our Service, including pages visited, features used, and actions taken within the application.

3. How We Use Your Information

We use the information we collect to:

Provide and maintain the Service
Generate license audit reports and cost optimization recommendations
Process your transactions and subscriptions
Send you service-related communications
Respond to your inquiries and support requests
Improve and optimize the Service
Protect against fraudulent or unauthorized activity

4. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. Historical license and usage data is retained to enable trend analysis and reporting. You may request deletion of your data at any time by contacting us.

5. Data Security

We implement appropriate security measures to protect your information, including:

Encryption of data in transit and at rest
Secure credential storage using industry-standard encryption
Regular security assessments and updates
Access controls and authentication requirements
Multi-factor authentication support

6. Third-Party Services

We use third-party services to operate our Service:

Microsoft Graph API - to access your M365 tenant data
Stripe - for payment processing
SMTP2GO - for email delivery

These services have their own privacy policies governing their use of your information.

7. Data Sharing

We do not sell your personal information. We may share your information only in these circumstances:

With your consent
With service providers who assist in operating our Service
To comply with legal obligations
To protect our rights and safety
In connection with a business transfer or acquisition

8. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your information
Export your data in a portable format
Opt out of certain data processing activities
Withdraw consent where processing is based on consent

9. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We do not use third-party tracking or advertising cookies. You can control cookies through your browser settings.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us.