Privacy Policy
This policy explains how Auth Portal collects, uses, stores, and shares information when users sign in or access connected applications.
Information we collect
When you use Auth Portal, we collect the account information needed to authenticate you, such as your name, email address, profile image, provider account identifier, session data, and security-related audit information.
If you sign in with Google, we only request the Google account information needed for sign-in and account matching, such as your basic profile information and email address.
How we use information
We use account information to sign you in, maintain secure sessions, connect your identity to authorized applications, support administrator workflows, and protect the service from unauthorized access.
We do not use Google user data for advertising, profiling, or selling user information.
How we share information
We share only the identity information required by an application you choose to access, such as your user identifier, name, email address, and requested OAuth or OpenID Connect claims.
We do not sell personal information. We may disclose information when required by law, to protect the service, or with your explicit authorization.
Storage and protection
We store account and session data using access-controlled application infrastructure and database storage. Access to production data is limited to authorized administrators who need it to operate or support the service.
We use reasonable technical and organizational safeguards designed to protect user data against unauthorized access, alteration, disclosure, or destruction.
Data retention and deletion
We retain account information for as long as your account remains active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.
To request account deletion or removal of personal information, contact the service administrator for this Auth Portal deployment.
Google user data
Auth Portal accesses Google user data only for authentication and identity federation. Google user data is not transferred to third parties except as necessary to provide user-facing sign-in and access features, comply with applicable law, or with your consent.
Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Changes
We may update this Privacy Policy when the service, legal requirements, or data practices change. The updated version will be posted on this page with a new effective date.