What we can see, and what we can't
We ask Microsoft and Google for the smallest permissions that can do the job. Here is every one, in plain words.
Read-only in OneNote. Only our own files in Google.
We ask Microsoft and Google for the smallest permissions that can do the job, and nothing in OneNote ever changes.
Read-only in OneNote
We read your notebooks to copy them. We never edit or delete anything in OneNote.
Only our files in Drive
Google lets us open only the files we create. The rest of your Drive stays hidden from us.
We keep the report, not your notes
Pages pass through on their way to Google. We store page names and results, not what you wrote.
Locked away, and yours to delete
Sign-ins are encrypted. Disconnect an account or delete a record whenever you like.
Exactly what we ask for
Microsoft and Google show you this list when you sign in. Nothing else is ever requested.
From Microsoft
- Read your notebooksNotes.Read.All
To copy the OneNote notebooks you can open. We can't change or delete them.
- Your name and emailUser.Read
To show which Microsoft account is connected.
- Keep working while you're awayoffline_access
So the move carries on after you close the page.
From Google
- Files we create in your Drivedrive.file
To make your folders and Docs. The rest of your Drive stays hidden from us.
- Your name and emailopenid, email, profile
To sign you in.
- Send email as yougmail.sendCompanies
Only for company admins, to send invites and reminders from your Gmail when you press Send.
- See your company directorydirectory, read-onlyCompanies
Only for company admins, to pick people to invite. We can't change your directory.
How we look after it
What we keep, where it lives, and how you remove it.
Notes aren't stored
Pages pass straight through to Google. We keep page names and results for your report.
Sign-ins encrypted
Your Microsoft and Google sign-ins are encrypted before they're stored.
Runs on Google Cloud
Our servers and database run on Google Cloud, in the United States.
Secure sessions
Signing out ends your session everywhere, on every device.
Your data, separate
Each person's records are kept apart, and browsers can't read the database.
Yours to remove
Disconnect either account, or delete a migration's record, whenever you like.
Take our access away at any time
You can remove our access yourself, without asking us.
In the app
On a migration's Accounts step, press Disconnect for Microsoft or Google.
At Microsoft
Remove the app from the Apps page of your Microsoft account.
At Google
Remove it under Third-party access in your Google Account.
In the app
On a migration's Accounts step, press Disconnect for Microsoft or Google.
At Microsoft
Remove the app from the Apps page of your Microsoft account.
At Google
Remove it under Third-party access in your Google Account.
Questions about security
For you, and for your IT team.
No. Pages pass through our servers on their way to Google. We keep page names and results so we can show your progress and your report.
No. The Microsoft permission we use only reads notebooks.
No. Google only lets us open the files we create for you.
On Google Cloud, in the United States.
No. We use it only to move your notebooks and show you the result.
Delete a migration's record in the app, or write to us and we'll delete everything we hold about you.
Bring your OneNote with you to Google
Sign in with Google, connect OneNote, and see how your notebooks will look before anything moves.