Digiexam Lockdown — Google Data Privacy Policy

This Data Usage and Synchronization Documentation applies specifically to the Digiexam Lockdown Solution (the "App") and describes how we collect, use, and handle the data retrieved through Google APIs.

Information We Collect

The App is designed solely to synchronize directory information between your Google Workspace environment and Digiexam IAM. To achieve this, the App requests read-only access to specific Google Workspace APIs. We collect only the following information:

• User Information (admin.directory.user.readonly): We read user profile information, such as names and email addresses, to provision user accounts.
• Group Information (admin.directory.group.readonly): We read group structures and memberships to determine and scope which specific users should be synchronized.
• Customer and Domain Information (admin.directory.customer.readonly): We read your Google Workspace customer ID and domain details to identify your specific tenant and securely perform domain-scoped directory synchronization.

How We Use the Information

We use the information collected exclusively for the core functionality of the App. Specifically, we use it to:

• identify your tenant and securely connect your Google Workspace domain to your Digiexam environment
• synchronize authorized users and groups from your directory into Digiexam IAM
• provision user accounts so they can seamlessly access authorized educational services within Digiexam

We do not use your Google Workspace directory data for any other purposes.

Strict Prohibitions on Data Use

We are committed to data minimization and strict purpose limitation.

• No Marketing: We will never use the data retrieved from Google Workspace APIs for marketing, promotional, or advertising purposes.
• No Selling: We will never sell, rent, or lease your Google Workspace data to third parties.
• No Profiling: Data is not used to build user profiles for any purpose outside of standard educational account provisioning within Digiexam.

Google API Services Usage Disclosure

The App's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Storage, Security, and Retention

The directory data synchronized through the App is transmitted securely and stored within Digiexam's secure infrastructure hosted on Google Cloud Platform (GCP). To ensure compliance with regional data protection requirements and privacy laws, data storage is localized based on the customer organization's location:

• US Customers: Data is stored securely in GCP data centers located in the United States.
• EU Customers: Data is stored securely in GCP data centers located within the European Union.

Data is retained only for as long as your organization maintains an active integration and requires synchronized provisioning. If you disconnect the App or terminate your Digiexam services, the synchronized directory data is handled in accordance with our standard data deletion protocols as outlined in the Terms and Conditions for the service.