Privacy Policy

Last updated: 2024-02-22

Internal-Share ("the Service") is an internal tool for use by its own authorized employees and contractors only. It is not available to the general public. This page explains what data the Service accesses and how it is used.

Who can use this Service

Access is restricted to a whitelist of pre-approved company email addresses. Anyone signing in with a Google account that is not on this list is denied access and no data is retained for them beyond the sign-in attempt itself.

What data we access

• Basic profile info — your name, email address and profile photo, used to identify you when you sign in.
• Gmail (read-only) — if you grant this permission, the Service can read messages in your mailbox in order to archive them for company record-keeping. Messages are only downloaded when an authorized administrator triggers an export, or when automatic export is explicitly enabled for your account.
• Google Drive — if you separately grant this permission, the Service can read files you choose to share through it for the same record-keeping purpose.

How we use and store data

Data obtained through Google is used solely to provide the Service to authorized employees — it is never sold, shared with third parties, or used for advertising. OAuth refresh tokens are encrypted at rest. Exported mail and files are stored on company-controlled infrastructure and are only accessible to authorized administrators.

Data retention and deletion

Exported data is retained until an administrator deletes it or your access is revoked. You can revoke this application's access to your Google account at any time from your Google Account permissions page. To request deletion of data already exported, contact your administrator at admin@intshare.com.

Contact

Questions about this policy can be directed to admin@intshare.com.