Privacy

This application is for exclusive use by NYCDOE schools. Only authorized points of contact within each school have the ability to log in and use the application. Log in access to all features that access user data is controlled via a non-Google identity / access token issued by the NYCDOE, hence all access and retention of user data falls under the scope of employer / employee privilege.

No data is retained on users who are not logged in as NYCDOE employees. All data collected is maintained under sole custody of NYCDOE and its contractors and used for purposes dictated by the NYCDOE.

For those NYCDOE employees who complete the linkage setup process, the following data will be stored by the application:

• User data
  • Logged in user's G Suite email address. This information is used for the purpose of confirming that the user is logged into the correct G Suite domain, and for creating an audit trail of usage on a secure application that is owned by the NYCDOE and to be used exclusively by NYCDOE employees.
• G Suite domain data
  • G Suite domain customer information, including address, email, contact phone, and customer ID. This information is retained to provide the NYCDOE with supporting documentation in the event of the need for G Suite domain recovery via Google support channels.
  • A list of all domain super-administrator email addresses. Likewise retained for domain recovery purposes. These email addresses may also be used to identify a user on whose behalf a partner G Suite Marketplace app (with domain wide delegated OAuth authority) will run.
  • A list of all delegated administrator email addresses. Likewise retained for domain recovery purposes.
  • The email address and org unit location of a special-purpose administrative account on the domain. This information is to be used in the event emergency access to the G Suite domain becomes necessary. Any emergency access to the domain will be accompanied by email notification to all concerned parties at the school.