This policy explains what AuthJet collects when you sign in to an app with AuthJet, how we use it, and how you have it deleted. AuthJet is the sign-in service of Substrio, provided by [LEGAL ENTITY] ("we", "us").
1. What we collect
When you sign in with Facebook, Facebook shares your Facebook user ID, your name, your email address and your profile picture. We ask Facebook for the public_profile and email permissions and nothing more.
When you sign in with another provider, such as Google, GitHub, Apple or Microsoft, that provider shares the same kinds of details. When you sign in by email, we keep your email address.
We also keep a record of your sign-ins and of the sessions they open, so we can keep your account secure.
2. How we use it
We use these details to sign you in, to keep your account and your sessions, and to protect your account against misuse. We do not sell your data, and we do not use it for advertising. We never post to Facebook, and we never read your friends, your posts or your messages.
3. The apps you sign in to
Each app you sign in to through AuthJet receives your name, your email address and your picture, so it can create your account in that app. That app decides what else it stores about you, under the privacy policy the app publishes.
4. Who else receives it
We share your details with no one else. We disclose them only when the law requires it.
5. How long we keep it
We keep your details while your AuthJet account exists. When you delete your account, we erase your profile, your sign-in records and your sessions at once.
6. Your choices
You can delete your account at any time, as Delete your data explains. You can also remove AuthJet in your Facebook settings, and Facebook then stops sharing your details with us.
The data protection law that applies to you, such as the GDPR, may give you more rights, such as the right to a copy of your data. Ask us, and we answer.
7. Security
We store passwords hashed, never in clear text, and every connection to AuthJet uses HTTPS. We lock an account after repeated failed sign-ins.
8. Changes to this policy
When we change this policy, we publish the new text here, and the date at the top of the page shows the last change.
9. Contact
Questions about this policy reach us from the Substrio console. [LEGAL ENTITY] provides AuthJet.