Cloud Command Privacy Policy

OS Consultants LLC operates Cloud Command, a business cloud administration portal for authorized staff and customer administrators. This policy describes Cloud Command, including its Microsoft 365 and Google Workspace integrations. Our separate company website and SMS services have their own notices.

Information accessed and collected

We process staff sign-in identity, names, business email addresses, roles, customer names and contact details, and connection and activity records. With an organization's authorization, Cloud Command accesses directory users and groups, membership, account status, organizational units, administrator indicators, and available sign-in and two-step verification information.

For enabled Microsoft features, the portal also processes license assignments, mailbox/archive and OneDrive usage, message delivery metadata, and audit/security events, including IP addresses, timestamps, resource names and identifiers. Requested administration can involve mailbox settings and other selected account information. The current Google integration accesses directory and account information; it does not collect Gmail message bodies or Drive file contents. Future integrations require appropriate disclosures and permissions before their data is accessed.

Purpose and administrative actions

We use this information to display your organization's directory, provide authorized IT administration, investigate security findings, troubleshoot service issues, and keep command history. Google read-only consent permits directory display. Separately approved management consent permits user and group creation and editing, membership changes, password resets, suspension/restoration, session sign-out, and user deletion, when an authorized operator submits those actions. Provider permissions and policies still apply.

Storage and protection

Cloud Command is hosted on Amazon Web Services infrastructure in the United States. It stores customer configuration, encrypted Google refresh tokens, staff sessions, and command records. Microsoft data may be cached for directory and security features. Google directory pages are fetched on demand; selected identifiers and addresses may be retained in command history. HTTPS protects network transport and application access is restricted to enabled staff. Temporary passwords entered for Google account actions are transmitted to Google and are not included in command history. No system can guarantee absolute security.

Sharing and Google Limited Use

Information is displayed to authorized workspace staff and sent to the connected provider when needed to perform requested operations. Infrastructure providers process data to host and operate the service. Information may also be disclosed when required by law or necessary to investigate abuse and protect the service. We do not sell Google user data, use it for advertising or credit decisions, or use it to train general-purpose AI models. Human access is limited to authorized administration and support, security investigation, or legal requirements.

Cloud Command's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention, revocation and deletion

Connection credentials remain stored until the connection is removed or a deletion request is fulfilled. Revoking access in your Google or Microsoft account stops future authorized API access but does not automatically erase previously stored records. Operational and command records are retained for administration, troubleshooting, security, and applicable contractual or legal needs; the application does not currently provide a fixed automatic deletion schedule. Contact us to request disconnection, access, correction, or deletion. We verify the requester's authority and explain any records that must be retained. Residual backup copies, where present, may remain until replaced or removed under applicable retention processes.

Cookies and your choices

The portal uses session cookies for authentication and security and browser storage for table preferences. Administrators choose which integrations to connect and may revoke consent through their provider's account or Admin console. Organization users should also contact their administrator regarding data access and changes.

Contact and updates

For privacy requests, contact privacy@osconsultants.net or call (786) 646-6376, OS Consultants LLC, Miami, Florida. Cloud Command is intended for business administration, not for children. We will update this page when practices change and provide additional notice and consent where required for new uses of provider data.

Optional Google reporting

With separate administrator approval, Cloud Command displays Google sign-in, administrator, Drive and OAuth audit events, including actor email, IP address, timestamps and event details, and daily per-user Gmail and Drive storage figures. Reports are fetched on demand for authorized workspace staff. This does not retrieve email bodies or file contents. Availability depends on Google permissions, edition and reporting delays.

With authorized Google reporting access, Cloud Command can display Gmail audit metadata (such as message subjects, available addresses, delivery events and message identifiers) and security audit evidence. It does not retrieve message bodies or file contents for these features. Security case evidence and review decisions are retained for administrator investigations.