Privacy Policy Addendum for Gopher for Users Reporting

This privacy policy addendum outlines our approach to data storage for the Gopher for Users cache and reporting features.  Reporting features include:

Per our general privacy policy, Amplified Labs tools store a minimum of personal data and tool or service specific data outside of the ownership of the user's G Suite account on which it is run.  Storing the minimum data required to provide our services remains an ongoing commitment for everything Amplified Labs builds.

Gopher for Users offers the option of enabling rich, high-performance reporting features in Sheets and Google Data Studio that require Amplified Labs to store in an external cache the following fields from the G Suite user resource available via API:

  • customerId
  • cacheOwner (user email address)
  • domain
  • gaId  (G Suite user ID)
  • primaryEmail
  • orgUnitPath
  • orgUnitId (in org unit table)
  • parentOrgUnitPath (in org unit table)
  • parentOrgUnitId (in org unit table)
  • blockInheritance (in org unit table)
  • givenName
  • familyName
  • fullName
  • isAdmin
  • isDelegatedAdmin
  • lastLoginTime
  • creationTime
  • agreedToTerms
  • suspended
  • changePasswordAtNextLogin
  • ipWhitelisted
  • genderType
  • orgUnitPath
  • isMailboxSetup
  • isEnrolledIn2Sv
  • isEnforcedIn2Sv
  • includeInGlobalAddressList
  • thumbnailPhotoUrl

All cached data is block encrypted at rest, https encrypted in transit, and secured via Google's auth protocols.

No personally-identifiable dimensions of this data are used for commercial purposes or for any purpose other than to provide and/or improve the service itself.

The cache for a domain can only be enabled and disabled by a super administrator. Super administrators who wish to remove data from Amplified Labs' cache may optionally do so when disabling the user cache.  All cache data is backed up with backups retained for 7 days.

Within the Gopher for Users application, reports run against the G Suite user data in the cache can be instantiated by G Suite super administrators and API-delegated admins on the domain. Learn more about how to grant the required API access to allow delegated admins to utilize Gopher for Users.

Reports generated via the user cache are made visible within Google Sheet and Google Data Studio, both of which adhere to Google's access control model, and can be shared with select G Suite non-administrators and groups in read-only form.