Politique de confidentialité - Application OAuth BlgCloud

1. Data collected

- User’s email address and name, obtained from the Google ID token.
- The ID token is not stored.
- Refresh token, used only to generate new temporary access tokens.
- Access tokens, used temporarily for sending emails.
- Access tokens are not stored.

Important: the user’s Gmail inbox is never accessed or read by the application.

2. Purposes

- To authenticate the user.
- To enable sending emails via Gmail on behalf of the user.

3. Data sharing

- Data is shared only with Google, for authentication and email sending.

4. Security

- Data is protected with appropriate technical and organizational measures.
- Refresh tokens are stored in encrypted form.
- Data access is restricted according to the principle of least privilege.

5. Retention and deletion

- The refresh token becomes unusable when a user revokes access from their Google account.
- The user can also delete their account at any time from the application, which leads to the immediate deletion of the associated refresh token.

6. Contact

For any privacy-related question, you can contact us at: dpo@blgcloud.com