Privacy Policy
Last Updated: December 24, 2025
This Privacy Policy describes how CBManagement ("we", "our", "us") collects, uses, and protects information when you use our Chromebook monitoring service.
Information We Collect
From Google Workspace Integration
When you connect your Google Workspace account, we access:
- Organizational Unit (OU) structure
- User email addresses and names
- User OU assignments
- User suspension status
From Chromebook Usage
Our Chrome extension collects:
- URLs visited by users
- Page titles of visited websites
- Time spent on each page
- Device serial numbers (for enrolled Chromebooks)
- User email addresses
- Extension version information
- Session information to group browsing activity
How We Use This Information
We use the collected information to:
- Display browsing activity reports to authorized administrators
- Enforce website blocking policies as configured by administrators
- Track Chromebook usage across your organization
- Generate usage statistics and analytics reports
- Identify and diagnose technical issues with the service
- Improve the functionality and performance of our service
Google API Services
We use Google Directory API to:
- Read your organizational structure (read-only access)
- Read user information (read-only access)
Important: We do NOT modify any data in your Google Workspace. All access is read-only and we cannot make changes to users, OUs, or any other Google Workspace settings.
Data Storage and Security
- All data is stored on secure servers with industry-standard encryption
- We use MySQL for database storage and Redis for caching
- All connections use HTTPS/SSL encryption
- Access tokens are temporary and expire after 1 hour
- We follow industry-standard security practices to protect your data
- Database access is restricted to authorized personnel only
Data Sharing and Disclosure
We are committed to protecting your privacy:
- We do NOT sell your data to any third parties
- We do NOT share your data with advertisers or marketers
- Data is only accessible to administrators you have authorized within your organization
- We may disclose information if required by law or to protect our legal rights
Data Retention
Browsing activity data is retained according to your organization's needs. You can delete data at any time through the administrative interface or by contacting support.
Your Rights
You have the right to:
- Access the data we have collected about your organization
- Request deletion of your data
- Revoke app permissions at any time through your Google Workspace settings
- Export your data for your own records
- Request corrections to inaccurate data
To exercise any of these rights, please contact us using the information below.
Children's Privacy
CBManagement is designed for use in educational environments and may collect information about students under the age of 13. We comply with COPPA (Children's Online Privacy Protection Act) and only collect the minimum information necessary to provide our monitoring and filtering services. Schools using our service are responsible for obtaining appropriate consent from parents/guardians as required by law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the service after such changes constitutes your acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
Address: [Your Organization Address]