Privacy Policy

Overview

SPO Scout is a browser extension designed to help SharePoint Online administrators and users explore and understand their SharePoint environment. Your privacy is important to us. This policy explains what data SPO Scout accesses, how it's used, and your rights.

What Data SPO Scout Accesses

SPO Scout reads information from SharePoint Online pages you visit, including:

• Site collection information (URL, title, template)
• Web/subsite details
• List and library metadata
• Content type information
• Site column definitions
• User and group information visible on the current page

Important: SPO Scout only reads metadata about your SharePoint structure. It does not access the contents of your documents, files, or any sensitive data stored in SharePoint.

How We Use Your Data

• Display in Extension: All SharePoint metadata is displayed directly in the extension popup.
• License Validation: When you activate or re-validate a Pro licence, the extension sends your licence key and tenant domain — and the email address you entered, if you supplied one — to our licensing API.
• Feedback (Optional): If you submit feedback, your email and message are sent to our server.

What We Don't Do

• We do not sell, share, or transfer your data to third parties for marketing purposes.
• We do not store your SharePoint content or document data on our servers.
• We do not track your browsing activity outside of SharePoint Online sites.
• We do not collect analytics or telemetry without your knowledge.

Data Storage and Security

• Local Storage: Your licence record, a cached validation result, the free-tier daily usage counter, your recent action history and your extension settings are stored in your browser. Uninstalling removes all of it.
• License Server: Licence requests are processed by our Azure-hosted API. What we retain there is the licence key, the tenant domain it is bound to, the purchaser email, licence status and dates, validation counts, and any feedback you choose to submit. No SharePoint data is stored server-side.
• Encryption: All communications use HTTPS encryption.

Website Analytics

This website (not the extension) uses two analytics services to understand how visitors use it and which pages lead people to install SPO Scout:

• Google Analytics 4: page views, referring sources, clicks on Install and Pricing buttons, and plays of the tour video. Google sets cookies to distinguish visitors.
• Microsoft Clarity: page views, click and scroll heatmaps, and anonymised session recordings. Text you type into forms is masked by Clarity before recording.

The events we send name the page and the button clicked — never your email, licence key, tenant, or anything you enter. This is separate from the extension, which contains no analytics or telemetry at all.

Third-Party Services

SPO Scout uses the following third-party services:

• Stripe: For payment processing. We do not store your credit card information.
• Microsoft Azure: Our license validation API is hosted on Azure.
• YouTube: The tour video on this website is hosted on YouTube and embedded in its privacy-enhanced mode. Nothing loads from YouTube until you press play. When you do, your browser connects to YouTube (Google), which receives your IP address and may store cookies or similar data on your device, and Google's privacy policy applies.

Why We Need Browser Permissions

SPO Scout requests the following permissions:

• activeTab: Lets SPO Scout act on the SharePoint tab you opened it from, and only while you are using it.
• storage: Saves your licence record, settings and recent action history on your own machine.
• scripting: Injects the analysis script into the SharePoint page so requests run in your authenticated session.
• sidePanel: Opens SPO Scout in the browser side panel beside SharePoint.
• https://*.sharepoint.com/*: Required to read SharePoint Online metadata.
• https://*.sharepoint.com.mcas.ms/*: The same access for tenants routed through the Microsoft Defender for Cloud Apps proxy.

We request only the minimum permissions necessary for the extension to function. The security and data handling page lists every outbound request and its exact contents.

Security Practices

• All data processing happens locally in your browser
• No SharePoint data is transmitted to external servers
• License checks use secure HTTPS connections
• We follow security best practices for browser extension development

Your Rights

You have the right to:

• Uninstall the extension at any time, which removes all locally stored data
• Request deletion of your license data from our servers
• Request information about what data we have stored about you

Contact us at support@sposcout.com

Not Affiliated with Microsoft

SPO Scout is an independent product. It is not affiliated with, endorsed by, or sponsored by Microsoft Corporation. SharePoint and Microsoft 365 are trademarks of Microsoft Corporation.

Contact Us

Email: support@sposcout.com