Policy detail
Google user data disclosure
This section documents how Identrail interacts with Google user data when a user signs in or signs up with Google.
01Google sign-in data accessed
When you choose Continue with Google, Identrail uses Google OAuth/OpenID Connect only to authenticate you and create or access your Identrail account. The Google user data we may receive is your Google account subject identifier, email address, email verification status, display name, profile image URL, locale, and the technical tokens or claims required to complete sign-in.
Identrail does not use Google sign-in to access Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or other Google Workspace content.
How Google user data is used
We use Google user data to verify your identity, create and maintain your Identrail account, establish secure sessions, prevent account takeover, match pending invitations to the email address you authenticated with, display basic account information, and keep audit records needed for security and abuse prevention.
We do not use Google user data for advertising, retargeting, personalized ads, credit decisions, data brokerage, or sale to third parties.
How Google user data is shared
Identrail does not sell Google user data. We share it only with service providers that help operate the product, such as authentication infrastructure, cloud hosting, database, observability, security, and customer-support providers, and only for the purpose of providing, securing, or supporting Identrail.
We may also disclose limited information if required by law, to protect users or the service, or as part of a merger, acquisition, or sale of assets subject to appropriate user notice or consent where required.
Storage and protection
Google-derived account identifiers and profile fields are stored in Identrail account and identity records. Sessions are protected with secure, HttpOnly cookies. Production data is protected with encryption in transit, access controls, least-privilege operational access, monitoring, and environment-specific secret management.
Human access to account data is limited to personnel or processors who need it to operate, secure, troubleshoot, or support the service.
Retention and deletion
We retain Google-derived account data while your Identrail account is active or as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, preserve security logs, and maintain backups.
You can request deletion of your account or Google-derived user data by emailing support@identrail.com with the subject Privacy Request. After verifying the request, we delete or de-identify applicable account data unless retention is required for security, legal, or operational reasons. Backup and log copies expire under our normal retention schedules.
Google API limited use
Identrail uses information received from Google APIs in accordance with the Google API Services User Data Policy, including the Limited Use requirements.
