Privacy policy

RightOwner

This policy explains how RightOwner, a Microsoft Teams app made by RuBuild Services ("we", "us"), handles information.

1. Summary

RightOwner runs inside Microsoft Teams and stores all directory data in your organization's own Microsoft 365 tenant. We never receive your directory content or your employees' personal data. For paid plans, our billing service keeps only your organization's Microsoft tenant ID and subscription status, so the app knows which plan you have.

2. What data the app uses

When a signed-in user opens RightOwner, the app uses Microsoft's official sign-in and Microsoft Graph to access, on that user's behalf:

• Basic profile information of the signed-in user (name, email) to identify them.
• Basic profile information of colleagues selected as owners or backups (name, email, job title, and whether their account is active) to show owner details and detect owners who have left.
• The number of active people in your organization, used only to check which plan fits your organization. Only the number is used; no names are read for this.
• The RightOwner directory: a SharePoint list in your organization's tenant containing the items your users enter (for example "Payroll"), descriptions, categories, owners, backups, and the date each owner last confirmed their item.
• The RightOwner activity history: a second SharePoint list ("RightOwner Activity Log") in your tenant that records each add, edit, delete, import and restore made in RightOwner, with the entry details. Microsoft 365 records which user made each change and when.

3. Where data is stored

All directory data and the activity history stay in SharePoint lists in your Microsoft 365 tenant, governed by your organization's Microsoft 365 security, retention and compliance settings. The app's code is delivered from app.rubuild.com but runs in the user's Teams client; directory data travels directly between the user's device and Microsoft 365. Microsoft's sign-in library keeps the user's sign-in session in that device's browser storage so they don't have to sign in every time; it is never sent to us.

4. Paid plans and billing

If your organization buys a paid plan, Microsoft processes the payment through Microsoft AppSource. We never receive card or bank details.

Our billing service, hosted on Cloudflare, stores only: your organization's Microsoft tenant ID, the subscription ID, the plan, the subscription status and related dates. It does not store names or email addresses.

When you activate a purchase, you sign in with Microsoft so we can show you the purchase details (plan, purchaser email, organization). This information is shown to you on screen and is not stored.

To check your plan, the app sends your organization's Microsoft tenant ID to our billing service. Cloudflare keeps basic technical logs of these requests for a short time.

5. What we do NOT do

• We do not collect, store, sell or share your directory data or employees' personal data.
• We do not use your data to train artificial intelligence models.
• We do not use advertising or tracking cookies.

6. Permissions

RightOwner requests the minimum Microsoft Graph permissions needed to work. Your Microsoft 365 administrator can review and revoke these permissions at any time in Microsoft Entra ID.

7. Support requests

If you email us, we use your name, email address and message only to answer your request, and delete them when no longer needed.

8. Deleting your data

Because your directory lives in your tenant, you control it. To remove everything: uninstall RightOwner from Teams and delete the RightOwner SharePoint lists ("RightOwner Directory" and "RightOwner Activity Log"). Your administrator can also remove the app's permissions in Microsoft Entra ID. To have your subscription record removed from our billing service after cancelling, email [email protected].

9. Children

RightOwner is a business tool and is not intended for anyone under 18.

10. Changes

We will post any changes on this page and update the effective date.

11. Contact

RuBuild Services, India. Email: [email protected]

Winsprout

Winsprout is a Microsoft Teams app, also available on the web at rubuild.com/winsprout, for keeping a private journal of your work wins, sharing proud moments and sharing your talents. RuBuild Services does not receive, store, sell or share your Winsprout data. There is no RuBuild server for Winsprout, no analytics and no advertising.

What the app stores and where

On your device: your wins, talents, a short record of the talent moments and proud moments you shared (title, date and where you shared it), and your settings (working days, weekly goal, reminder time, the name you choose for reports, your talent card line) are saved in the app's local storage on your device. On the web you can use Winsprout without any account; your data then stays only in that browser. Your level and badges are worked out from this data and are not stored separately.

In your own OneDrive (optional): if you sign in with a Microsoft account (work, school or personal, such as Outlook.com), the same data is saved in a private app folder in your OneDrive (Apps › Winsprout), and Word reports you create are saved there too. This uses the Microsoft Graph permissions Files.ReadWrite.AppFolder (the app's own folder only, not your other files) and User.Read (to show which account is signed in).

In your own Google Drive (optional, web version only): if you choose "Sign in with Google", the same data and your Word reports are saved in a folder called "Winsprout" in your Google Drive. This uses the Google permission drive.file (only files the app created, not your other Drive files) and openid, email and profile (to show which account is signed in and fill in your name on reports). Google sign-in lasts only while the browser tab is open.

Google API Services: Winsprout's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from your Google account is used only to save and load your own Winsprout files in your own Drive and to show your name. It is never sent to RuBuild Services or anyone else, never used for advertising and never used to train AI models.

Sharing in Teams (optional, Microsoft work or school accounts only)

Only when you choose to share a talent moment or a proud moment (a win, badge or level), the app asks for Chat.ReadBasic, Team.ReadBasic.All and Channel.ReadBasic.All to show the names of your chats, teams and channels, and ChatMessage.Send and ChannelMessage.Send to post the message you wrote, as you, to the place you picked, after you confirm. The app doesn't read your messages. Photos you attach (up to four) are sent inside that Teams message and stored by Microsoft with the chat or channel. Video and audio are shared only as links you provide.

Your employer

Winsprout doesn't send your wins to your manager or employer. You decide what to share. If you use a work or school account, your OneDrive belongs to your organisation: its Microsoft 365 policies apply to the backup file and to messages you post in Teams, and you may lose access when you leave. With a personal Microsoft account or a Google account, the file stays in your own personal storage.

Hosting, Microsoft and Google services

The app's files are delivered from rubuild.com, hosted on GitHub Pages, which may process standard technical data such as IP addresses to deliver files (GitHub's privacy statement). Sign-in, OneDrive and Teams are provided by Microsoft under the Microsoft privacy statement. Google sign-in and Drive are provided by Google under the Google privacy policy.

Deleting your data

In Winsprout, Settings › "Delete all my data" removes your data from the device and, if connected, deletes the backup file from your OneDrive or Google Drive. You can also delete the Apps › Winsprout folder in OneDrive, or the Winsprout folder in Google Drive, yourself, and remove the app's access at myaccount.google.com/permissions (Google) or account.live.com/consent/Manage (personal Microsoft account). Posts you shared stay in Teams until you delete them there.

Children

Winsprout is a workplace tool and isn't directed at children.

All our apps

Changes

If any of our apps ever needs to handle data differently, we'll update this page and its date before it happens.

Contact

RuBuild Services, India. Email: [email protected]