Privacy Policy

1. Data Controller Information

Data Controller: AGOL Helper Application
Contact: For privacy-related inquiries, please contact your system administrator or organization's IT department.

2. Information We Collect

2.1 ArcGIS Online Data

• Organization information (name, ID, subscription details)
• User account information (usernames, roles, permissions, last login dates)
• Content metadata (item titles, types, owners, access levels, creation/modification dates)
• Sharing and permission settings
• Usage statistics and analytics

2.2 Application Data

• Authentication tokens (temporarily stored for API access)
• Application usage logs
• System performance metrics
• User preferences and settings

2.3 Technical Data

• IP addresses (for security and audit purposes)
• Browser information and device type
• Session information
• Error logs and diagnostic data

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Legitimate Interest: Data governance, security monitoring, and organizational compliance
• Contract: Providing the AGOL Helper service as requested by your organization
• Legal Obligation: Compliance with data protection and security regulations
• Consent: Where explicitly provided for specific processing activities

4. How We Use Your Information

• Provide data governance and audit capabilities for ArcGIS Online
• Monitor and analyze content sharing patterns and security risks
• Generate reports on user permissions and content usage
• Identify orphaned content and sharing violations
• Maintain application security and performance
• Comply with organizational policies and legal requirements

5. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal data to third parties except:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• As part of organizational reporting within your entity

6. Data Retention

We retain your personal data only as long as necessary:

• Active Data: Retained while the application is in use
• Audit Logs: Retained for 2 years for compliance purposes
• Authentication Tokens: Expired automatically after 24 hours
• Backup Data: Retained for 90 days in secure backups

7. Your Rights Under GDPR

If you are in the European Union, you have the following rights:

• Right to Information: Know what data we collect and how it's used
• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to limitations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent where applicable

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Secure database storage with backup procedures
• Limited access on a need-to-know basis

9. International Data Transfers

Data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard contractual clauses
• Binding corporate rules
• Your explicit consent

10. Cookies and Tracking

AGOL Helper uses essential cookies and similar technologies:

• Essential Cookies: Required for application functionality
• Session Cookies: Maintain your login state
• Preference Cookies: Remember your settings
• Analytics Cookies: Monitor application performance (anonymized)

11. Children's Privacy

AGOL Helper is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours
• Inform affected individuals without undue delay
• Provide clear information about the breach and remedial actions
• Take immediate steps to contain and resolve the breach

13. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will:

• Post the updated policy on this page
• Update the "Last updated" date
• Notify users of significant changes
• Obtain consent for material changes where required

14. Contact Information

For questions about this privacy policy or to exercise your rights, please contact:

15. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.