This privacy policy addendum outlines our approach to data storage for the Gopher for Users cache and reporting features. Reporting features include:
- Auto-refreshing in-Sheet reports
- Auto-refreshing Google Data Studio Connectors and templated reports
Per our general privacy policy, Amplified Labs tools store a minimum of personal data and tool or service-specific data outside of the ownership of the user's Google Workspace account on which it is run. Storing the minimum data required to provide our services remains an ongoing commitment for everything Amplified Labs builds.
Gopher for Users offers the option of enabling rich, high-performance reporting features in Sheets and Google Data Studio that require Amplified Labs to store in an external cache the following fields from the Google Workspace user resource available via API:
- customerId
- cacheOwner (user email address)
- domain
- gaId (Google Workspace user ID)
- primaryEmail
- orgUnitPath
- orgUnitId (in org unit table)
- parentOrgUnitPath (in org unit table)
- parentOrgUnitId (in org unit table)
- blockInheritance (in org unit table)
- givenName
- familyName
- fullName
- isAdmin
- isDelegatedAdmin
- lastLoginTime
- creationTime
- agreedToTerms
- suspended
- changePasswordAtNextLogin
- ipWhitelisted
- genderType
- orgUnitPath
- isMailboxSetup
- isEnrolledIn2Sv
- isEnforcedIn2Sv
- includeInGlobalAddressList
- thumbnailPhotoUrl
All cached data is block encrypted at rest, HTTPS encrypted in transit, and secured via Google's auth protocols.
No personally-identifiable dimensions of this data are used for commercial purposes or for any purpose other than to provide and/or improve the service itself.
The cache for a domain can only be enabled and disabled by a super administrator. Super administrators who wish to remove data from Amplified Labs' cache may optionally do so when disabling the user cache. All cached data is backed up with backups retained for 7 days.
Within the Gopher for Users application, reports run against the Google Workspace user data in the cache can be instantiated by Google Workspace super administrators and API-delegated admins on the domain. Learn more about how to grant the required API access to allow delegated admins to utilize Gopher for Users.
Reports generated via the user cache are made visible within Google Sheet and Google Data Studio, both of which adhere to Google's access control model, and can be shared with select Google Workspace non-administrators and groups in read-only format.