Privacy Policy

Last updated: August 2026

Kahlil Morrison, trading as Handoff ("Handoff", "we", "us"), acts as the controller for personal data processed to operate this platform, manage user accounts, provide customer support, and process billing.

When a customer organization connects its Microsoft 365 tenant to Handoff, that customer remains the controller of their tenant data while Handoff acts solely as a data processor. Customer Data is processed strictly to execute approved workflows under our Data Processing Addendum.

1. Categories of Data We Process

• Account Details: Name, work email address, organization name, and authentication credentials.
• Billing Information: Payment processing is handled securely via Stripe. Handoff never stores full credit card numbers.
• Microsoft 365 Tenant Metadata: Directory identifiers, license counts, and group memberships required to generate pre-flight workflow plans.
• Audit Records: Cryptographic execution timestamps, administrator approval records, and API operation logs.

2. AI Safeguards & Model Training

Handoff uses language models strictly to parse user intent and assemble read-only execution plans. We do not use customer directory data, employee names, or tenant settings to train foundation AI models.

3. Data Retention & Revocation

You can revoke Handoff's connection to your Microsoft 365 tenant at any time directly through your Entra ID enterprise application portal. Upon account deletion, all cached metadata is purged within 30 days.

4. Contact Information

For inquiries regarding data privacy or DPA agreements, contact us at support@gethandoff.uk.