Privacy Policy
Last updated: October 21, 2026 · ServerBridge License Auditor
This Privacy Policy describes what information Lee Crowe Software Solutions LLC ("we," "us," or "our") collects in connection with the ServerBridge License Auditor and this website, and how we use it.
What we don't collect
The License Auditor reads your Microsoft 365 license and activity data (and, on the paid tiers, each licensed mailbox's type, size and whether it has an archive, from Microsoft 365's usage reports; on Team and Enterprise, the number of groups and directory roles each leaver-looking account still belongs to) using read-only Microsoft Graph permissions — delegated permissions under your own sign-in or, for scheduled and multi-tenant audits, read-only application permissions on an app registration you create and control in your own tenant — solely to produce your report. That data flows directly between your device and your own Microsoft 365 tenant via the Microsoft Graph API. We never see, upload, store, or retain your tenant data, your report, or your authentication tokens, and the tool contains no telemetry, analytics, or "phone-home" behavior. Your report and CSV output are written locally on your own device.
Local drift file (Team and Enterprise tiers). On the Team and Enterprise tiers, the Software keeps a small summary of each single-tenant audit — the tenant name, the user principal names of dormant seats, counts, and recoverable-spend totals — in a file stored locally on your own device, with access limited to your user account, so it can report what changed since your last audit. This file stays on your device and is never transmitted to us or any third party. The Free and Starter tiers do not create it.
Saved license (paid tiers). After your license key is validated, the
Software saves the key, your plan, the date it was last validated, and the random device
identifier described below in your user account's application-data folder, with access
limited to your user account, so you don't have to enter the key on every run and a brief
network outage doesn't interrupt your plan. It is sent only to our licensing server, for
validation. Run licenseauditor --deactivate to remove the saved license.
What we do collect
- License and billing information. When you purchase a paid tier, our payment processor, Stripe, collects your payment details directly — we never see or store your card number. We receive your name and email address to issue your license key.
- License key validation. The Software sends your license key and a randomly generated device identifier (not tied to any personal hardware identifier) to our licensing server to validate your license and confirm it is unexpired.
- Marketing contact. If you purchase a paid tier, we add your name and email to our email service provider (Brevo) so we can send your license key, a short series of onboarding emails and, occasionally, news about our other product, ServerBridge. You can unsubscribe at any time using the link in any of these emails.
- Website contact requests. If you email us (e.g. a question or a refund request), we keep that correspondence to respond to you.
- Website analytics. We use two cookieless services to understand how
people find and use this website. Cloudflare Web Analytics counts page views, referrers
and approximate country. PostHog records each page view (including the page address and
any campaign tags in it, such as
utm_sourceorct), clicks on the Buy and download buttons, your browser type and approximate location. Neither sets cookies or stores an identifier on your device, neither builds a profile of you, and we don't use them to identify you. Because nothing is stored on your device, no consent banner is required.
How we use this information
Solely to provide and bill for the License Auditor, send your license key, onboarding emails and occasional news about our products, respond to support requests, and meet our legal and tax obligations. We do not sell your information or use it for advertising.
Third parties
We share limited data with the following service providers, each of which has its own privacy policy governing the data it processes:
- Stripe (payment processing) — receives your payment details and email address directly to process your purchase. We never see or store your card number.
- Microsoft Azure (Azure Table Storage, license records) — stores your name, email address, license key, and license validation history so we can validate your license.
- Brevo (transactional and marketing email) — receives your name and email address to deliver your license key, onboarding emails and occasional product news, which you can unsubscribe from at any time.
- Cloudflare (website analytics) — processes aggregate, cookieless traffic statistics. It does not track you across sites.
- PostHog (website analytics, United States) — receives the page views and button clicks described above. It sets no cookies and builds no profile of you.
We do not sell or share your data with any other third party, and we do not transfer data to any third party for advertising purposes.
Data retention
We retain license and billing records for the duration of your active license, plus any additional period required to meet tax and accounting obligations (typically up to seven years for financial records). When your license expires or is deactivated, we delete or anonymize your name and email address within one hundred and twenty (120) days, except where retention is required by law. We retain the license key and the payment reference for our records, as these are needed to handle refunds, chargebacks and tax obligations. The 120-day period reflects the window in which a card payment can still be disputed, during which we may need your contact details to respond. You can request deletion of your account data at any time by emailing us, subject to records we're legally required to keep.
Your rights and how to exercise them
Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal data, or to object to or restrict our processing of it. To exercise any of these rights, email hello@leecrowesoftware.com. We will respond to verified requests within forty-five (45) days of receipt. This period may be extended once by an additional forty-five (45) days when reasonably necessary, provided we notify you of the extension and the reason for it within the initial period. If we decline to take action on your request, we will notify you of the reasons and provide instructions on how to appeal our decision. We will not discriminate against you for exercising these rights.
Security and breach notification
We use reasonable technical and organizational measures to protect the limited personal data we hold, including encryption of data in transit and restricted access to systems that process license and billing data. No method of transmission or storage is completely secure. In the event of a data breach affecting your personal data, we will notify you in the most expedient time possible and without unreasonable delay, in accordance with Kentucky law and other applicable legal requirements.
Children's privacy
The License Auditor is intended for use by business administrators and is not directed to children under 13. We do not knowingly collect personal data from children under 13.
Sensitive data
Lee Crowe Software Solutions LLC does not process sensitive data as defined by the Kentucky Consumer Data Protection Act and similar laws — including data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnoses, sexual orientation, citizenship or immigration status, genetic or biometric data, or precise geolocation — without first obtaining your affirmative consent.
Limitation of liability
Our liability arising out of or related to this Privacy Policy and our handling of your data is subject to the limitations set out in Section 8 of the License Auditor End User License Agreement, including the cap on total liability described therein, except to the extent such limitations are prohibited by applicable law. Nothing in this Policy limits our liability for gross negligence, willful misconduct, or any other liability that cannot be excluded or limited under applicable law.
Governing law and jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the Commonwealth of Kentucky, United States of America, without regard to its conflict of law provisions. Any dispute arising out of or relating to this Privacy Policy shall be subject to the dispute resolution and venue provisions set out in Section 12.2 of the License Auditor End User License Agreement.
Contact and appeals
Questions about this policy, your data, or a request you've submitted? Email hello@leecrowesoftware.com. If we decline to take action on your request, you may appeal our decision within a reasonable period of time by emailing the same address. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. If the appeal is denied, you may contact the Kentucky Attorney General using the Attorney General's online consumer data privacy complaint form, or your jurisdiction's applicable data protection or consumer protection authority. We will include this link in any written decision denying an appeal.