Privacy Policy

• Account and contact information: names, business details, email addresses, telephone numbers, roles and sign-in identifiers.
• Service and billing information: subscription, seat, transaction and support records. Payment card details are handled by our payment provider and are not stored by us in full.
• Connected-system information: information you or your administrator authorizes us to access in Microsoft 365, Google Workspace and other connected business systems.
• Usage and security information: device, browser, network, authentication, audit, error and feature-usage metadata needed to operate and secure the service.
• Communications: messages, instructions, feedback and files you choose to provide through the service or support channels.

A Google Workspace super administrator can install The Everything Connector for a domain. Depending on the migration selected, the connector may access directory users, aliases, groups, memberships, licences, rooms and resources; Gmail mailboxes and supported settings; calendars, contacts and tasks; and My Drive and Shared Drive files, metadata, permissions and activity.

We use this information only to inventory the source, propose mappings, migrate the customer-selected data to its Microsoft 365 environment, run customer-authorized incremental synchronization, validate the result, resolve migration exceptions, provide support with permission, and protect the service. We do not use Google Workspace information for advertising, credit decisions, data brokerage, or training a general AI model. We do not sell it.

• Provide, configure, migrate, support and improve the service.
• Authenticate users, enforce permissions, maintain audit evidence and prevent fraud, abuse and security incidents.
• Process subscriptions, communicate service information and answer support or privacy requests.
• Comply with law, enforce our agreements and establish or defend legal claims.

Where applicable, we rely on performance of a contract, the customer’s instructions or consent, our legitimate interests in operating and securing the service, and compliance with legal obligations.

We disclose information only as needed to:

• the customer and its authorized administrators, owners and users;
• Microsoft, Google, our cloud and AI infrastructure providers, payment providers and communications providers acting for the service;
• professional advisers and authorities where required by law, security needs or legal claims; and
• a successor in a corporate transaction, subject to applicable notice and consent requirements.

Providers may process information outside your country. We use contractual, technical and organizational safeguards appropriate to the information and applicable law.

Automated systems perform normal service processing. Our personnel do not read Google Workspace user data unless the customer gives explicit permission for specific support, access is necessary to investigate a security incident, or access is required by law. Access is restricted, logged and reviewed.

We may send the minimum information necessary to contracted AI providers to produce a customer-requested result. We do not permit customer content to be used to train general-purpose models for other customers.

The deterministic Google Workspace inventory, migration and validation path does not send Google Workspace message or file content to an AI model provider. After migration, if the customer chooses to use migrated content through The Everything’s user-facing AI features, that later processing occurs from the customer’s Microsoft 365 environment only on the customer’s instructions and remains subject to the restrictions in this policy.

We use encryption in transit and at rest where appropriate, tenant and role isolation, least-privilege access, audit logging, credential encryption, monitoring and tested recovery controls. No security method can eliminate every risk.

Customer content is retained in the customer’s connected systems according to that customer’s settings. Migration data is kept only as long as needed to perform and verify the migration or meet documented support, security and legal requirements. We retain limited operational, billing and audit metadata for the periods required to provide and defend the service. We do not create permanent copies of Google user data for unrelated purposes.

Depending on your location, you may ask to access, correct, export, restrict or delete personal information, object to certain processing, or complain to a privacy regulator. A business user should normally contact their organization first because it controls the business data.

Email privacy@the-everything-app.com with your name, organization and request. We will verify authority before acting. See our data deletion page for the connector revocation and deletion process. You may also complain to the Office of the Australian Information Commissioner or your local privacy authority.

The service is designed for businesses and is not directed to children.

We may update this policy as the service or law changes. We will update the date above and give additional notice where required.

Privacy enquiries: privacy@the-everything-app.com
General support: contact@the-everything-app.com