Privacy Policy

Last updated: 4 August 2026

SPO-Assist (“the Extension”) is a Chrome extension that helps you perform SharePoint Online administration tasks in the browser. This policy explains what data is involved and how it is handled.

What the Extension does

When you open SPO-Assist on a SharePoint Online page, it uses your existing Microsoft 365 / SharePoint browser session to call SharePoint REST APIs for the site or list you are working on (for example: field definitions, permissions, content types, views, and related metadata).

Use at your own risk

SPO-Assist acts as whichever Microsoft 365 / SharePoint account is currently signed in on the browser tab you have open — there is no separate SPO-Assist identity. Everything the Extension shows you and every change you make through it is scoped to that current user’s session and permission level in the tenant, so results will differ if you switch accounts or tabs.

Some actions the Extension exposes — for example deleting event receivers, deactivating site or web features, revoking sharing links, or editing the property bag or raw page canvas JSON — call SharePoint REST directly and take effect immediately. The Extension does not keep its own backup or undo history for these changes, so review what you’re about to do before confirming it. The Extension is provided “as is,” without warranty of any kind, and you use it at your own risk.

Data we collect

The Extension does not collect personal data on a remote server operated by SPO-Assist. It does not include analytics, advertising, or crash-reporting SDKs that transmit data to third parties.

In your browser, the Extension may temporarily store:

• Short-lived UI and session state in chrome.storage.session (for example, the current site context while the Extension is in use).

SharePoint Online content you view or change through the Extension (lists, fields, permissions, files, and so on) remains in your Microsoft 365 tenant and is subject to your organization’s Microsoft / SharePoint policies.

Permissions

• activeTab — read context from the page you are on when you open the Extension.
• scripting / content scripts — run on https://*.sharepoint.com/* so REST calls use a matching Origin and your signed-in session.
• tabs — locate an open SharePoint tab for the target tenant and support opening the UI in a full tab.
• storage — hold temporary session UI state locally.
• Host access to SharePoint Online — call SharePoint APIs on sites you are already authenticated to.

Data sharing

SPO-Assist does not sell user data. It does not transfer SharePoint data to third parties for advertising or unrelated purposes. Network traffic from the Extension goes to SharePoint Online (Microsoft) endpoints for the tenant you are using.

Chrome Web Store Limited Use

The use of information received from Google APIs and Chrome extension APIs will adhere to the Chrome Web Store User Data Policy , including the Limited Use requirements.

Children

The Extension is intended for workplace use with SharePoint Online and is not directed at children.

Changes

We may update this policy when the Extension’s behavior changes. The “Last updated” date at the top will be revised when that happens.

Contact

Questions about this policy: support@spo-assist.com