Sign-in privacy notice

Data stored

The system stores the approved email address, Google account identifier, display name and profile-image address, the last verified Workspace domain when present, account-link time, and last sign-in time. It also stores the CMS role, active state, and administrator-assigned access groups.

How it is used

The data is used only to authenticate the account, enforce access to website and CMS destinations, show the signed-in account, and preserve attribution in administrative history. Google authorization codes and ID tokens are verified during sign-in and are not stored.

Deactivation and requests

An administrator can deactivate an account so its next request is refused. Administrative history and identity binding are retained to preserve accountability; access is transferred by deactivating the old row and creating a new one, not by rebinding it to another person.

For access or deletion questions, contact info@thevista.net or use the contact page.