Effective September 22, 2026. This policy describes GLS Connect, the public site at glsconnect.com, customer workspaces, and the GLS nscapi Microsoft 365 app. A signed customer agreement controls if it says something different.
Who we are
GLS Connect provides a business data platform for NetSuite and related finance systems, including the public website, the customer portal, connectors, and the Microsoft 365 app named GLS nscapi MCP. Questions about this policy go to info@glsconnect.com.
Information we collect
On the public site we collect what you send us: company name, work email, optional name, and the systems you mention on Get Started or by email. We also collect ordinary technical logs such as browser type, pages requested, and the time of the request.
In a customer workspace we process account information your administrator provides, including names, work emails, roles, and workspace settings. We process business records, including NetSuite and other source-system data, only to run the sync, reporting, and connector features that customer has turned on.
Microsoft 365 and the GLS nscapi connector
When you open the GLS nscapi MCP app in Microsoft 365 or Copilot, Microsoft signs you in with your Entra ID account. We receive the identity Microsoft provides for that sign-in, such as your name, work email, and tenant, so the connector can act as you.
The connector calls GLS Connect tools for the signed-in user. Those tools can read workspace and NetSuite data that your GLS Connect permissions already allow. We use that data to answer the request you make in Copilot or Teams. We do not use the connector to sign in with a stored personal API key in Microsoft's plugin vault.
Microsoft hosts the sign-in, consent, and chat experience under its own terms. This policy covers what GLS Connect receives after you consent.
How we use information
We use information to operate the site and the product, answer setup and support requests, authenticate users, run connectors and sync jobs the customer configured, keep audit and security logs, and meet the customer agreement. We do not sell personal information.
Sharing
We share information with the customer organization that owns the workspace, with service providers who host or operate GLS Connect under our instructions, and when the law requires it. Source-system vendors such as NetSuite and Microsoft receive traffic that their own services require in order to complete a sign-in or a data request.
Retention and security
We keep contact requests, workspace records, and logs for as long as the customer account is active and for a limited period afterward to support the agreement, security review, and legal duties. Secret values such as connector credentials stay in approved protected stores and are not collected through the public website forms.
Access to customer data is limited to people and services that need it to run the product. Customer administrators choose who in their organization can use a workspace and which connectors are enabled.
Your choices
You can ask us to correct contact details you sent through the public site by emailing info@glsconnect.com. Workspace users should ask their customer administrator to change roles or remove access. Disconnecting the Microsoft 365 app stops new connector calls from that app. It does not delete records the customer already stored in GLS Connect.
Changes
We will post updates on this page and change the effective date. Continued use of the site or the connector after the new date means you accept the updated policy.