Legal

Privacy Policy

Last Updated: February 4, 2026

Summary

SP Toolkit is designed with privacy at its core. Your SharePoint data is processed directly between Microsoft services and never stored on our servers. We only collect minimal information necessary to provide licensing and support services.

1. Introduction

DNG Software Pty Ltd (ABN 56 696 282 541) ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use SP Toolkit (the "Software") and visit our website at sharepointtoolkit.com (the "Website").

Please read this Privacy Policy carefully. By using the Software or Website, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 SharePoint Data (Processed, Not Stored)

When you use SP Toolkit to migrate content, the Software processes your SharePoint data (lists, libraries, documents, metadata) directly within your browser using Microsoft Graph APIs. This data is transferred directly between SharePoint sites and is never transmitted to or stored on our servers.

2.2 Account Information

When you purchase a license or create an account, we may collect:

  • Name and email address
  • Company/organization name
  • Microsoft 365 tenant identifier (for license validation)
  • Billing information (processed by our payment provider)

2.3 Licence Usage Data

As part of licence validation and usage tracking, the Software sends aggregate operational metrics to our licensing API:

  • Aggregate counts (items migrated, lists processed, documents transferred)
  • Operation type and duration
  • Error and warning counts (no error content or stack traces)
  • Client version number

No list names, item content, field values, site URLs, or user directory data is included in these metrics.

2.4 Website Information

When you visit our Website, we may automatically collect:

  • Browser type and version
  • Operating system
  • IP address (anonymized)
  • Pages visited and time spent
  • Referral source

2.5 Contact Form Submissions

When you submit our contact or demo request forms, we collect the information you provide (name, email, company, message) to respond to your inquiry.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Software
  • Process transactions and manage your license
  • Respond to your inquiries and support requests
  • Send important updates about the Software (security updates, feature announcements)
  • Analyze usage patterns to improve features and user experience
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Data Storage and Security

4.1 SharePoint Data

Your SharePoint content is never stored on our servers. All data processing occurs:

  • Within your web browser (client-side processing)
  • Directly through Microsoft Graph APIs to SharePoint Online
  • Within Microsoft's Azure infrastructure

4.2 Account and Licence Data

Account information and aggregate licence usage data are stored securely using industry-standard encryption and security practices. Our infrastructure runs on Microsoft Azure, which is compliant with major security standards including SOC 2, ISO 27001, and GDPR.

4.3 Security Measures

We implement appropriate technical and organizational measures including:

  • Encryption in transit (TLS 1.2+) and at rest
  • Access controls and audit logging
  • Regular review of security practices

5. Data Sharing

We do not sell, trade, or rent your personal information. We may share information only in the following circumstances:

  • Service Providers: With trusted third parties who assist in operating our business (payment processing, email delivery, analytics) under strict confidentiality agreements
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
  • With Your Consent: For any other purpose with your explicit consent

6. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data
  • Portability: Request your data in a machine-readable format
  • Objection: Object to certain processing of your data
  • Restriction: Request restricted processing of your data

To exercise these rights, please contact us at privacy@sharepointtoolkit.com. We will respond to your request within 30 days.

7. Cookies and Tracking

Our Website uses cookies and similar technologies to:

  • Remember your preferences and settings
  • Understand how you use our Website
  • Improve our services

You can control cookies through your browser settings. Note that disabling cookies may affect Website functionality.

8. Third-Party Services

Our Software and Website integrate with or use the following third-party services:

  • Microsoft Graph API: For SharePoint data access (governed by Microsoft's privacy policy)
  • Stripe: For payment processing (governed by Stripe's privacy policy)
  • Microsoft Azure: For infrastructure and hosting

9. Children's Privacy

SP Toolkit is designed for business use and is not intended for children under 16 years of age. We do not knowingly collect personal information from children.

10. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States or other countries. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law.

11. Data Retention

We retain your information for as long as necessary to:

  • Provide our services and maintain your license
  • Comply with legal obligations
  • Resolve disputes and enforce agreements

When you close your account, we will delete or anonymize your personal data within 90 days, unless retention is required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our Website or sending you an email. Your continued use of the Software after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

GDPR Compliance

For users in the European Economic Area, we process personal data as a data controller under the General Data Protection Regulation (GDPR). Our lawful bases for processing include: consent, contractual necessity, legitimate interests, and legal obligations.