Terms of Service

Welcome to UserAuthGuard ("Service"), provided by Asan Digital LLC ("we," "our," or "us"). By accessing or using our Service, you agree to be bound by these Terms of Service ("Terms"). If you are using the Service on behalf of an educational institution or organization, you represent that you have the authority to bind that institution or organization to these Terms.

UserAuthGuard is a Chromebook management solution designed for educational institutions. The Service interfaces with Google Workspace Admin SDK to provide device management, organizational unit management, user provisioning, and policy enforcement capabilities for educational Chromebook fleets.

2.1 SendGuard: Email Contact Management

SendGuard is an optional feature that enables schools to manage approved email contacts for students using Google Groups. When enabled, the Service creates and manages Google Groups on the school's domain to facilitate controlled email communication between students and their approved contacts (typically parents or guardians). SendGuard requires additional Google Workspace Admin SDK scopes for group management, group membership, and group settings. These scopes are only requested when SendGuard is enabled by a school administrator.

2.2 Google Classroom Integration

The Google Classroom integration is an optional feature that lets teachers target assessment lockdown sessions and live classroom monitoring sessions to a specific Google Classroom course. When a teacher connects the integration, the Service reads the teacher's list of active Google Classroom courses and the rosters of those courses, on a read-only basis, in order to populate the class-selection dropdown in the teacher dashboard and to determine which students should receive a lockdown command. The integration requires two read-only Google Classroom API scopes (classroom.courses.readonly and classroom.rosters.readonly) and is only requested when a teacher explicitly clicks "Connect Google Classroom." The integration does not access assignments, coursework, grades, profile photos, or guardian information.

3.1 Google Workspace Administrator Account

To use the Service, you must have a valid Google Workspace administrator account with the necessary permissions to grant access to the required Google Workspace Admin SDK scopes.

3.2 Account Security

You are responsible for maintaining the security of your account credentials and for all activities that occur under your account. You must immediately notify us of any unauthorized use of your account or any other breach of security.

4.1 Required Data Access

The Service requires access to certain Google Workspace data through the following scopes:

• Chrome OS device metadata
• Organizational unit information
• User provisioning data
• Chrome policy management
• Customer domain information
• Google Groups management (when SendGuard is enabled)
• Google Groups membership (when SendGuard is enabled)
• Google Groups settings (when SendGuard is enabled)
• Google Classroom course list, read-only (when a teacher connects the Google Classroom integration)
• Google Classroom course rosters, read-only (when a teacher connects the Google Classroom integration)

4.2 Data Usage

We collect and process only the data necessary to provide the Service's core functionality. This includes:

• Device management and monitoring
• User-device association
• Policy enforcement
• Organizational structure management
• Email contact group management (SendGuard): creating Google Groups, managing group membership with approved parent/guardian contacts, and configuring group settings. We do not read, store, or process any email content.
• Google Classroom integration: reading the teacher's list of active Google Classroom courses and the rosters of those courses (course ID, name, section, owner, and enrolled student email addresses) so that assessment lockdown and live classroom monitoring sessions can be targeted to a specific class. The integration is read-only, we do not modify, create, or delete any Google Classroom data.

4.3 SendGuard Data

When SendGuard is enabled, the following additional data is collected and stored:

• Parent/guardian names, email addresses, and phone numbers as provided by the school administrator
• Student-to-contact relationship information
• Google Group identifiers for student contact groups

This data is used exclusively for managing approved email contacts and is deleted when SendGuard is disabled or the school's account is terminated.

4.4 Google Classroom Data

When a teacher connects the Google Classroom integration, the following additional data is collected and stored on a read-only basis:

• Course ID, name, section, course state (active/archived), and owner email address for each of the teacher's Google Classroom courses
• Email address and Google Workspace user ID of each student enrolled in those courses

This data is used exclusively to populate the class-selection dropdown in the teacher dashboard and to determine which students should receive an assessment lockdown command or a classroom monitoring session. It is refreshed hourly while the integration is connected, and is deleted within 24 hours of the teacher disconnecting the integration or the school's account being terminated. UserAuthGuard does not access Google Classroom assignments, coursework, grades, profile photos, or guardian information.

4.5 Data Protection

We implement appropriate technical and organizational measures to protect your data. For specific details about our data handling practices, please refer to our Privacy Policy.

5.1 Acceptable Use

You agree to use the Service only for its intended purpose and in compliance with:

• These Terms
• All applicable laws and regulations
• Google's terms of service and policies
• Your institution's acceptable use policies

5.2 Prohibited Activities

You may not:

• Attempt to gain unauthorized access to the Service
• Use the Service to harm others or their property
• Reverse engineer the Service
• Use the Service for any illegal purpose
• Share your account credentials with unauthorized users

6.1 Availability

While we strive to maintain high availability, we do not guarantee uninterrupted access to the Service. We reserve the right to modify, suspend, or discontinue the Service with reasonable notice.

6.2 Technical Support

We provide technical support through our designated support channels. Response times may vary based on the severity of the issue and your service level agreement.

7.1 Ownership

The Service, including all related intellectual property rights, is and will remain our property. These Terms do not grant you any right to use our trademarks or other brand elements.

7.2 Feedback

If you provide feedback about the Service, you grant us the right to use that feedback without restriction.

8.1 Privacy Policy

Our Privacy Policy, available separately, describes how we collect, use, and share your information. By using the Service, you agree to our Privacy Policy.

8.2 Data Processing Agreement

For customers subject to GDPR or similar regulations, we offer a Data Processing Agreement upon request.

9.1 Termination by You

You may terminate these Terms by discontinuing use of the Service and revoking access to the Google Workspace Admin SDK scopes.

9.2 Termination by Us

We may terminate or suspend your access to the Service immediately if:

• You violate these Terms
• You fail to pay any fees when due
• We are required to do so by law
• We discontinue the Service

To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues.

UserAuthGuard offers an optional SMS text-message program that notifies enrolled, authorized school-district staff when a safety alert is raised. By enrolling your mobile number and checking the consent box in the UserAuthGuard dashboard, you agree to receive safety-alert text messages at that number. Enrollment is voluntary and is not a condition of purchasing or using the Service or of employment.

Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe at any time and HELP for assistance. Mobile carriers are not liable for delayed or undelivered messages. Your phone number and consent data are handled as described in our Privacy Policy and are never shared or sold to third parties or affiliates for marketing purposes. Full program terms are published at userauthguard.com/sms-alerts/opt-in.

We may modify these Terms at any time by posting the revised version on our website. Your continued use of the Service after the effective date of any modifications constitutes acceptance of the modified Terms.

For questions about these Terms, please contact us at:

Email: admin@userauthguard.com

Address: 13 Station Ave, Schwenksville PA USA

These Terms shall be governed by the laws of the Commonwealth of Pennsylvania, United States, without regard to its conflict of law provisions.