Privacy Policy

Appyfurious Workspace Admin (GAM7) · Effective 13 November 2026

Purpose and operator

This policy describes Google Workspace data handled by Appyfurious Workspace Admin (GAM7), an administrative tool operated by Appyfurious. It is used by authorized administrators for the organizations they manage.

Information accessed

With an administrator's OAuth authorization, the tool accesses that administrator's Google identity (name, profile information and email address), Workspace user directory information, group identities and memberships, group settings, customer identifiers, domains and organizational units. The current integration does not request Gmail message contents, Drive file contents or Calendar event contents.

Use of information

Information is used to identify the correct organization, perform administration requested by authorized operators, verify changes and maintain administrative records. It is not sold or used for advertising. Google API data is handled under the Google API Services User Data Policy, including its Limited Use requirements.

Storage and service providers

OAuth refresh credentials are stored in Google Cloud Secret Manager with access controlled by the organization. GAM requires temporary local credential files during use; those files are removed after the operation. Selected administrative results may be retained in access records and processed in approved administration tools, including Codex when an operator uses it. Those tools process the data needed for the requested administrative task under their applicable service terms and the organization's access controls. This informational website is hosted by Cloudflare, which may process ordinary connection and security logs.

Retention and control

Credentials are retained while the connection is needed and authorized. Operational records are retained for administration and access accountability. Authorized organization representatives can request removal of this tool's stored credentials or administrative records through the support contact below, subject to applicable record-retention obligations. Removing this tool's records does not delete users or groups from Google Workspace.

An administrator can revoke the application's access in Google Account connections. Revocation prevents further authorized API access using that grant, but does not itself remove previously retained administrative records.

Contact

For access, privacy or deletion requests, contact d.lubnevsky@appyfurious.com and identify the organization concerned. Do not send passwords or OAuth tokens by email.