Privacy Policy

This Privacy Policy explains how Intune Documentation Generator ("we", "our", or "the Service") handles information when you use the app to generate documentation from Microsoft Intune. We designed the Service to minimize data collection and focus on privacy by default.

What We Access

• Authentication via Microsoft OAuth 2.0 (Azure AD). We request read-only Microsoft Graph permissions necessary to list Intune configurations and related assignments.
• Intune configuration metadata and settings required to render your documentation (policies, profiles, scripts, assignments, and related details), read-only.

How We Process Data

• We do not persist your Intune configuration data or generated PDFs. Data is retrieved during your session and used solely to build your report.
• For larger exports, we may temporarily stage a JSON copy of your selected configuration in short‑lived storage (Vercel Blob) to reliably generate your PDF due to request body size limits on serverless platforms (see https://vercel.com/guides/how-to-bypass-vercel-body-size-limit-serverless-functions). The file is transmitted over TLS, exists for minutes, and is deleted immediately after generation.
• Access tokens are managed by your browser session to call Microsoft Graph; we do not persist them server-side.

Analytics & Cookies

We use privacy-friendly analytics (Plausible) to understand aggregate usage without cookies or personal identifiers. Analytics are used to improve stability and usability, not to track individuals.

• Plausible Analytics is 100% cookieless and does not track personal data or use browser fingerprinting.
• We collect only aggregated, anonymous metrics such as page views, referrers, and device types.
• Your consent preference for analytics is stored in localStorage (not a cookie) and remains on your device only.
• You can change your analytics preference at any time by clearing your browser's local storage or declining via the consent banner.

Data Sharing

We do not sell or share your configuration data with third parties. Data accessed from Microsoft Graph is used solely to generate your documentation.

Security

• Authentication is handled via Microsoft OAuth 2.0 (Azure AD).
• Only read-only Graph permissions are requested for Intune data.
• We avoid storing tenant data; PDFs are generated on demand and not persisted.

Data Retention

We do not retain your Intune configuration data or generated documents. Operational logs described above may exist temporarily within hosting provider systems as part of standard logging.

Your Choices

• You can disconnect at any time by signing out of the app.
• You can revoke the app’s permissions from your Microsoft account/tenant to prevent future access.

Children’s Privacy

The Service is intended for professional/enterprise use and is not directed to children.

Changes

We may update this policy to reflect improvements or operational changes. If we make material changes, we will update the effective date above.

Contact

Questions about this policy? Contact us via LinkedIn: @ugurkocde.