Privacy policy
Effective October 18, 2026. Seat Census is a technical preview operated by Sloan Computer Research LLC dba Seat Census ("we", "us").
Seat Census audits a Microsoft 365 tenant's licenses and health for the tenant's Global Administrators. This policy
explains what we read from your tenant, what we keep, how we protect it and when we delete it. It covers
app.seatcensus.com and reports.seatcensus.com.
Who can use it
Only a person with an active Global Administrator role in a Microsoft 365 tenant can sign in. Each tenant has one
Seat Census account; every Global Admin who signs in uses that account. If you lose the role, you lose access at
your next sign-in, and within 12 hours at most.
What we read from your tenant
-
Seat Census uses delegated Microsoft permissions: it acts as you, with your own rights, only
while you are using it. You approve these permissions on Microsoft's consent screen.
-
The audits and tools read your tenant through Microsoft Graph, Exchange Online and Microsoft
Teams: for example users, licenses, groups, app registrations, mailbox settings and permissions, sign-in and
message-trace records, and Teams calling settings.
-
Seat Census changes your tenant only when you start an action (for example, disabling an app) and confirm it.
The permission to make changes is asked for separately, the first time you run an action.
What we keep
-
Tenant data: the results of your audits (reports, CSV and JSON files, logs, warnings and
errors), your settings and price lists, the latest result of a tool you ran, and the Microsoft sign-in tokens of
your session.
-
Account details: your tenant's ID, name and initial domain; the user names and display names of
its Global Admins who have signed in; when they signed in; your plan; payment status and Stripe IDs, if you pay;
and the status and counts of your runs (not their contents).
-
Sign-in tokens last only as long as your session: a session ends after 2 hours without use, or
12 hours after you signed in, and signing out ends it at once. Ending a session deletes its tokens and the tool
result it held.
-
On the free plan, we keep only your latest audit with results. When a paid plan ends, your account is trimmed to
what the free plan keeps, and the rest is deleted.
How we protect it
-
Every tenant's data is encrypted with that tenant's own key (AES-256-GCM). The keys are kept in a separate key
store, themselves encrypted by a master key.
- The database keeps tenants apart with row-level security, so one tenant's requests can't reach another's data.
-
Reports open on a separate site, reports.seatcensus.com, through links that work once and expire within minutes,
in a sandbox that blocks all network access.
- Our operational logs hold IDs only (tenant, run and job IDs), never names, addresses or results.
- Our own administration panel shows account details only. It has no access to tenant data or keys.
When we delete it
-
Closing your account (any of your Global Admins can, on the Subscription page) deletes all of
your tenant data, your tenant's key, your sessions and your account immediately, and cancels any subscription.
-
Backups. Copies of your data in our backups are encrypted with your tenant's key, so they can't be
read once the key is deleted. Backups of the key store are deleted after at most 7 days, so
7 days after your account closes, no copy of your data can be decrypted from any backup. Backups
of the main database may keep account details (above) longer.
-
Unused free accounts are deleted after 90 days in which no Global Admin of the tenant has signed
in, exactly as if the account had been closed. We send no warning email; the Subscription page shows the date.
Paid accounts are never deleted for being unused.
- Stripe keeps its own customer and invoice records, as accounting rules require.
Who else handles data
- Microsoft: your tenant and its sign-in (Microsoft Entra ID).
- Stripe: payments, if you buy a paid plan. We never see or store your card details.
- Cloudflare: DNS for our domains.
During the technical preview, Seat Census runs on servers we operate in the United States. We don't sell your data,
use it for advertising, or share it except as described here or when the law requires it.
Cookies
We use two cookies, both needed for sign-in: a session cookie while you are signed in, and a short-lived cookie
during the Microsoft sign-in itself. There are no analytics, advertising or third-party tracking cookies. We send no
email.
Your choices
You can see your data in the app, delete individual runs (on plans that allow it), and close your account to delete
everything. You can also remove Seat Census from your tenant at any time in the Microsoft Entra admin center
(Enterprise applications). For any other request about your data, contact us at support@seatcensus.com.
To report a security problem, write to security@seatcensus.com.
Changes
This is a technical preview, and this policy may change as Seat Census does. We'll post changes here with a new
effective date.
Back to Seat Census ยท Terms of service