Microsoft questionnaire privacy notice
Pinnacle HQ, Inc. · Updated October 27, 2026
What this connection does
Pinnacle Storage Report connects Microsoft 365 to an invited company questionnaire. An organisation administrator must approve access. The initial pilot supports Outlook, OneDrive and SharePoint. Reports are available for review; importing them does not automatically replace your questionnaire answers.
Permissions and collection
We request basic sign-in (openid and profile) and application permissions Reports.Read.All, User.Read.All, Mail.ReadBasic.All, Files.Read.All and Sites.Read.All. These Microsoft permissions can allow broader reading than our implementation performs, including file contents. Our collectors request usage reports and selected metadata: storage totals, retained item/file counts and observed dates. We do not request email bodies, attachments or file contents. Teams messages, recordings and Dynamics collection are disabled for this pilot.
Stored information
We store aggregate report values, coverage and collection dates, plus connection identifiers and access bindings needed to protect the connection. Raw CSV reports and personal report rows are processed temporarily and discarded. We do not store them or log names, email addresses, file names, content, access tokens or temporary report URLs. Explicit resource scopes and scan continuation state are encrypted.
Refresh and retention
Reports refresh daily while the connection is enabled and authorised. Detailed metadata scans start only when an owner chooses Collect details, then refresh daily until stopped. Incomplete scan checkpoints expire after seven days and are removed on completion, cancellation or access loss. Imported aggregates are retained for up to 90 days. Applied questionnaire answers remain part of the questionnaire until edited or deleted under its applicable retention arrangements.
Your control
Review the figures and their coverage before applying them. Organisation-wide storage totals may cover several companies; do not apply them to each company. Disconnect stops future collection. Delete imported history stops collection and deletes saved reports and scan results, but does not erase answers already copied into the form. An administrator can separately revoke the Pinnacle Storage Report grant in Microsoft Entra Enterprise applications.
Use and access
The connection is bound to its authorised company form and does not grant access to other companies. Authorised form owners and Pinnacle staff can review imported figures for the intake assessment. Microsoft-derived reports and metadata are not sold, used for advertising or used to train AI models. Hosting providers process stored information on our behalf; this connection does not authorise sharing your Microsoft account or its contents with buyers.
For access or deletion requests, contact privacy@hqpinnacle.co. This supplements our Privacy Policy and is separate from the one-time Pinnacle Data Discovery connector.