Privacy & Data Handling Notice

This notice covers Document Governance Hub (DGH), a customer-installed product of AppParallax LLC. It supplements the Website Privacy Policy for inquiries, business contacts, and support correspondence.

Customer-controlled deployment and roles

DGH operates in the customer’s Microsoft environment using customer-owned connections. Routine DGH workflow records and governed documents are not routed through an AppParallax-hosted document service. The customer determines the purposes, lawful basis, access, retention, and notices for its document workflow and is generally the controller of its business records, or may act as a processor for another organization. Microsoft processes service data under the customer’s Microsoft agreements and the configuration of the relevant service.

Licensing or installing DGH does not by itself give AppParallax access to customer content or make AppParallax the processor of all tenant records. AppParallax controls its own inquiry, account-relationship, and business correspondence processing as described in the Website Privacy Policy. If implementation or support requires AppParallax to process personal information on the customer’s behalf, the parties must establish the required scope, instructions, confidentiality, security, retention/deletion, subprocessors, incident assistance, and transfer terms in an appropriate data-processing agreement before that access or processing begins. This public notice is not a substitute for that agreement.

Information and purposes

Depending on customer configuration, DGH processes document content and titles, requester and reviewer names and email addresses, routing and classification fields, comments, approval decisions, timestamps, version and lifecycle information, notification details, and operational/history records. Those records support intake, routing, human review, controlled publication, lifecycle management, notifications, troubleshooting, and recovery. The customer should minimize personal information and decide whether the product and its access model are suitable for the proposed content.

Storage, recipients, and service records

Records are stored or processed in customer-selected Microsoft services, primarily SharePoint Online and Power Automate, with Teams, Standard Approvals, Office 365 Users, and optional Microsoft Forms. Copies or metadata may also appear in approval records, flow run history, notifications, logs, and backups. Service-specific Microsoft retention and data-location settings apply; deleting a SharePoint item does not necessarily delete all related service records. Authorized audience members, privileged administrators, the customer service account, and Microsoft service providers can have access according to their roles and agreements.

Support and diagnostic access

AppParallax may receive information you voluntarily supply or authorize for support. Use redacted error text, version numbers, request identifiers, and minimal screenshots where possible. Do not send passwords, tokens, API keys, patient information, payment-card data, government identifiers, or unnecessary confidential documents through the website or ordinary email. If sensitive diagnostic evidence is essential, agree the secure transfer method, access scope, and any required processing terms first. Public support channels are not a clinical or emergency service.

AppParallax uses business and support information to respond, diagnose issues, provide agreed services, secure systems, maintain appropriate records, and meet legal duties. The Website Privacy Policy explains relevant legal bases, service-provider sharing, retention criteria, and privacy requests. We do not sell support information or use it for targeted advertising.

Security and customer responsibilities

DGH uses a documented group-scoped SharePoint permission model and guarded workflow operations. It is not a per-document information barrier or an immutable regulatory ledger. Tenant/site administrators and the service account remain privileged. The customer must maintain suitable identities, licenses, access groups, tenant policies, backups, recovery procedures, and a validated production configuration. DGH does not independently establish HIPAA, GxP, SOX, ISO, or other regulatory compliance.

Retention, deletion, export, and uninstall

The customer controls business-record retention and export within its Microsoft services. Preserve required records and review all relevant SharePoint containers, approvals, notification records, flow histories, and backups before removing a solution or account. Uninstalling the managed solution does not itself erase all workflow data. AppParallax-held diagnostics are governed by the support agreement and Website Privacy Policy; when acting as a processor, return/deletion and any legally required retention follow the applicable data-processing agreement.

Individual rights and international processing

For access, correction, deletion, restriction, objection, portability, or other requests relating to tenant-held DGH records, contact the organization operating that deployment. AppParallax cannot directly change records it cannot access and will assist only within an authorized role and applicable duties. For AppParallax-held business/support information, contact us below; the Website Privacy Policy explains verification, response rights, consent withdrawal where relevant, and complaints to a competent supervisory authority.

Microsoft service locations follow the customer’s agreements and service configuration. Support information may be accessed in the United States and other countries where AppParallax or its providers operate. Where restricted transfers are involved, applicable safeguards must be established before processing. See the international-processing disclosure; no United States-only storage or AppParallax Data Privacy Framework certification is promised.

Changes and contact

We update this notice when the product’s relevant data-handling model changes and provide additional notice where required. Contact andrew@appparallax.com or DGH Support.

AppParallax LLC
30 N Gould St Ste N
Sheridan, WY 82801, United States
andrew@appparallax.com

This is our registered agent mailing address.