Privacy Policy for Web Viewer 2.0

This policy explains what Web Viewer collects, why we use it, and how we protect it.

What account and usage data does Web Viewer collect?

Microsoft provides your work email address when you sign in. We use it to identify your account, verify trial and license access, and connect licenses that your organization assigns.

We store:

• Your work email address, Office display language, Office host, and Office platform
• The date Web Viewer created your account
• Your first and most recent usage dates and number of website loads
• Your trial or license status

Why does Web Viewer ask for access to the Office document?

Office lets add-ins save their own settings alongside a document. Web Viewer uses the ReadWriteDocument permission only for these settings:

• The selected website URL
• The toolbar state, zoom level, and view mode
• The license holder’s work email when the file carries licensed access

Office stores these settings in the file’s add-in data. This lets Web Viewer restore the same website and layout when you reopen the file.

What reaches your server when I enter a website URL?

We receive the complete URL you enter, including its path and query parameters. We use the URL to check whether the website allows Web Viewer to embed it.

Our server makes a separate request to the URL, follows redirects, and checks the website settings that control embedding. The server discards the returned webpage data. It does not receive content from your Office browsing session.

Does activity inside an embedded website pass through your servers?

No. For example, if you load Wikipedia and search for “Apollo 11,” your browser sends the search directly to Wikipedia, and Wikipedia returns the results directly. Neither the search nor the results pass through our servers.

• The website receives credentials, form entries, and other interactions directly.
• The website receives camera or microphone data directly if you grant it access through Office.

The selected website handles this data under its own privacy policy.

What diagnostic and support data does Web Viewer collect?

When Web Viewer encounters an error, Sentry receives a diagnostic event so we can investigate and fix the problem. The event includes:

• The signed-in user’s work email address
• The browser, operating system, app version, and Web Viewer page where the error occurred
• The error message and recent Web Viewer events, including the selected website URL when relevant

We also process the information that users choose to send when they contact support.

Does Web Viewer access other Microsoft profiles or your organization directory?

No. Web Viewer does not receive or store your Microsoft tenant ID, organization directory, or other users’ profiles.

Does Web Viewer use session replay or Google Analytics?

No. The add-in does not use session replay, screen recording, performance tracing, or Google Analytics.

Do you sell personal information or use it for marketing?

No. We do not sell personal information or disclose it to third parties for advertising or marketing.

Which service providers store Web Viewer data, and where?

• Google Cloud Firestore stores account, licensing, and usage data in United States data centers.
• Sentry stores diagnostic events in United States data centers.

Does your organization require a different data residency region? Contact support and we’ll help.

How do you protect Web Viewer data?

We send account, usage, selected URL, and diagnostic data over encrypted HTTPS connections. Google Cloud encrypts stored data. Firestore security rules prevent public access.

We limit access to our Google Cloud and Sentry projects to authorized personnel who need the data to operate the product, respond to support requests, or comply with legal obligations.

How long do you keep Web Viewer data?

• We retain account and usage records linked to your work email until you request deletion.
• We retain diagnostic events only as long as needed to investigate errors and maintain the product.
• We retain aggregated signup and usage totals that contain no email addresses or other identifiers.

How can I access, correct, or delete my data?

Email product@1990quebec.com from the work email you use with Web Viewer. We will verify the request and delete the records linked to your work email within 30 days.

How will you communicate policy changes?

We post each revision on this page and update the effective date below.

How can I contact you?

Email questions or concerns about this policy to product@1990quebec.com.