1. The short version
MSP Tenant Launcher is built to hold as little of your data as possible. We collect just enough account information to run billing and support a paid subscription. We never collect, see, or store your Microsoft passwords, access tokens, or your customers' tenant data — that stays entirely in your own browser.
2. What we collect
| Data | Collected? | Where it lives |
|---|---|---|
| Microsoft passwords | Never | — |
| Microsoft access/refresh tokens | Never | — |
| Tenant names & SharePoint slugs | Yes | Your browser only (browser.storage.local) |
| Firefox container mappings | Yes | Your browser only |
| Account email address | Yes | Our servers |
| Password (for your account) | Yes, hashed | Our auth provider, [e.g., Supabase] |
| Subscription / plan status | Yes | Our servers |
| Payment card details | Never directly | Our payment processor, [e.g., Stripe] |
Rows marked "your browser only" are never transmitted to us. We have no technical mechanism to see your tenant list, container names, or anything else about how you use the extension day to day.
3. How we use what we do collect
- Your email to identify your account, send billing receipts, and respond to support requests.
- Your subscription status to determine your tenant/seat limits.
- Basic technical logs (e.g., login timestamps, error reports) to keep the Service running and secure.
We do not sell your data, and we do not use it for advertising.
4. Third parties we share data with
We use a small number of service providers to operate the Service. Each only receives the minimum data needed to do its job:
- [Auth/database provider, e.g., Supabase] — stores your account email and hashed password.
- [Payment processor, e.g., Stripe] — processes your payment; we receive confirmation of payment status, never your full card number.
- [Email delivery provider, if any] — sends transactional emails like receipts and password resets.
We do not share your data with anyone else, except where required by law.
5. Cookies and tracking
This website does not use advertising or cross-site tracking cookies. [If you add analytics later, e.g. Plausible/Google Analytics, disclose it here and update this section.] The browser extension itself does not use cookies for tracking — it uses Firefox's container/cookie-store APIs solely to keep your customers' admin sessions isolated from each other.
6. Data retention
We retain your account data for as long as your account is active. If you delete your account, we delete your email and billing association within [X days], except where we're required to retain records for tax or legal purposes. Data stored locally in your browser is entirely under your control — uninstalling the extension or clearing its storage removes it immediately.
7. Your rights
Depending on where you live, you may have the right to:
- Request a copy of the account data we hold about you;
- Request correction or deletion of that data;
- Object to or restrict certain processing;
- Withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at contact@tenantlauncher.com. EU/UK residents also have the right to lodge a complaint with their local data protection authority.
8. Children's privacy
The Service is intended for use by IT professionals and is not directed at children. We do not knowingly collect data from anyone under 16.
9. Security
We rely on our infrastructure providers' security practices (encryption in transit, hashed passwords, access controls) and design the Service to minimize what we hold in the first place — the less we collect, the less there is to protect. No system is perfectly secure, and we can't guarantee absolute security of any data transmitted to us.
10. Changes to this policy
We may update this Privacy Policy from time to time. We'll update the "Last updated" date above and, for material changes, make a reasonable effort to notify active subscribers by email.
11. Contact
Questions about this policy or your data? Contact us at contact@tenantlauncher.com.
This document is a template provided for convenience and does not constitute legal advice. You are responsible for ensuring it accurately describes your actual data practices and complies with the laws that apply to your business and your customers before relying on it.