Privacy Policy
1. Introduction
PackMyApp (“we”, “our”, or “the service”) is a cloud-hosted application deployment service for IT teams, available at packmyapp.com. This Privacy Policy explains what data we process when you use the service, how we use it, where it is stored, and what rights you have.
2. Data We Process
When you use PackMyApp, the following data is processed and stored by the service:
- Account and identity data — your name, email address, and Microsoft Entra ID object and tenant identifiers, obtained during Microsoft sign-in. We never receive or store your Microsoft password.
- Tenant links — the Intune tenants you choose to connect, so deployments run against the right environment.
- Deployment and update metadata — which applications you deploy, versions, target groups, schedules, templates, and configuration you enter in the deployment wizard.
- Activity logs — actions taken in the application (sign-in, deploy, sync) for audit and troubleshooting.
- Billing data — subscription tier, invoice metadata, and a Stripe customer reference. Card details are handled entirely by Stripe and never touch PackMyApp systems.
- Operational telemetry — performance and error diagnostics (Azure Application Insights) used solely to keep the service healthy. We do not use advertising trackers or third-party marketing analytics.
What we deliberately do not store: your Microsoft credentials, the contents of your devices, and your custom installers — PackMyApp Forge packages your own applications locally on your machine and uploads them directly to your Intune tenant, never to PackMyApp servers.
3. How We Use Your Data
- Authenticate you via Microsoft Entra ID and maintain your session.
- Execute Intune deployment and update actions on your behalf, scoped to the tenant session of the signed-in user (delegated Microsoft Graph tokens).
- Show your deployment history, update status, and audit logs inside the application.
- Send service emails you asked for (such as update notifications and team invitations).
- Process subscription payments through Stripe.
We do not sell or rent your data, and we do not share it with third parties beyond the processors listed below.
4. Where Your Data Lives
PackMyApp runs on Microsoft Azure in the European Union: the application in the West Europe region and the database (Azure Database for PostgreSQL) in the North Europe region, with point-in-time backups retained for 7 days. API calls to Microsoft Graph are made on your behalf using delegated tokens.
5. Processors We Rely On
- Microsoft Azure — hosting, database, email delivery (Azure Communication Services), and operational telemetry. See privacy.microsoft.com.
- Microsoft Graph / Entra ID — authentication and Intune management actions inside your own tenant.
- Stripe — payment processing. See stripe.com/privacy.
6. Data Retention
Account, tenant-link, and deployment data are retained while your account is active. Activity logs are kept for operational and audit purposes and can be cleared by administrators. Unlinking a tenant removes the stored link. If you want your account and associated data deleted, contact us via the contact page and we will remove it.
7. Your Rights
Under the GDPR and similar data protection laws you have the right to access, correct, export, and delete your personal data, and to object to or restrict certain processing. Contact us via the contact page to exercise these rights. If you use PackMyApp through your employer, some requests may also run through your organization’s administrator.
8. Security
HTTPS-only with TLS 1.2+, enforced security headers, delegated (not stored) Microsoft credentials, MFA-protected platform administration, and continuously verified health checks. Read the full story on our Security & Trust page.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by the “Last updated” date at the top of this page. Continued use of the service after an update constitutes acceptance of the revised policy.
10. Contact
Questions about this Privacy Policy can be directed via our contact page.