Privacy Policy

CA Policy Manager (Publisher: Sumikko Lab)

1. Information the app reads

You sign in with your work or school account, and the app reads the following from Microsoft Graph within your permissions. All permissions are read-only and all requests are GET. The app does not modify policies, settings, or users.

• Sign-in logs (including time, result, applied policies, IP address and location, and user and application names)
• Conditional Access policy definitions and named locations
• Users' group membership
• Application display names (only to show names on screen; optional)
• User and group display names, and groups' members and parent groups (only to search for and check emergency access accounts and to show groups in the policy check; kept in memory only; the permission to read group information is optional)

2. Storage

Retrieved information is stored only on this PC, in the current Windows user's folder. It is not stored on any server of the publisher.

• Sign-in records are stored unencrypted and contain full IP addresses (user names are hashed). There is no retention limit and nothing is deleted automatically; apart from being replaced when the same period is retrieved again, the records remain until you delete them.
• User names and group membership, policy definitions, and connection settings (such as the tenant ID) are stored encrypted.
• Application display names, display settings, and the consent record are stored unencrypted.
• Access tokens are kept in memory only and are never written to a file.

3. Data transmission

The app itself communicates only with Microsoft sign-in and Microsoft Graph (read-only). The app does not send retrieved information, usage data, or error information to the publisher or to any third party. No data is collected for analytics, advertising, or tracking.

The following are not transmissions of information by the app:

• Installation and updates from Microsoft Store, and the purchase and purchase status check of the paid edition, use Microsoft Store features.
• Operating-system mechanisms such as Windows Error Reporting are governed by your OS settings.
• When you select a link on screen, a public page such as the admin center opens in your default browser.

4. Deletion

Delete stored data in Settings removes the sign-in logs, user names and membership, and policy definitions. The settings, the consent record, the random value (salt), and application display names are kept. When you switch the connected tenant, the app asks for confirmation and then deletes the stored data of the previous tenant, including the emergency access settings and application names. See Data storage and deletion for details. Nothing is retrieved or stored until you agree to the Terms.

5. Handling

Data retrieved, stored, or exported by the app may contain personal data. Handle it in accordance with your organization's policies and applicable law.

6. Data during support

If you choose to provide screenshots or logs when contacting support, they are used only to resolve the issue and are deleted afterward. Make sure they do not contain confidential information before you send them.

7. Changes to this policy

This policy may change. When it does, this page is updated.

8. Contact

Publisher: Sumikko Lab
Contact: support@sumikkolab.com

Last updated: 2026-11-03