Privacy Policy

This Privacy Policy explains how Sorad Dynamics (“we”, “our”, or “us”) collects, uses, and protects personal information when you use Sorad Marketing (the “Service”).

This Service uses Google Sign-In via Supabase Authentication strictly for user authentication purposes. We are committed to protecting your privacy and complying with Google OAuth 2.0 policies and the Google API Services User Data Policy, including the Limited Use requirements.

1. Information We Collect

1.1 Information Received from Google Sign-In

When you sign in using Google, we receive only basic account information from your Google account. This includes:

• Your email address
• Your display name
• Your public profile picture (if available)

We do not access or request:

• Gmail content
• Google Drive files
• Calendar data
• Contacts
• Any sensitive or restricted Google user data

We request only the minimum OAuth scopes required for authentication: openid, email, and profile.

1.2 Information Stored by Supabase

Authentication is handled securely using Supabase Auth. Supabase stores:

• Your unique user ID
• Your email address
• Authentication metadata provided by Google

Supabase acts as a data processor on our behalf and follows industry-standard security and privacy practices.

2. How We Use Your Information

We use your Google account information only to:

• Authenticate you when you sign in
• Create and manage your user account
• Display your name or profile image within the app (if applicable)
• Maintain account security and prevent abuse

We do not use your Google data for:

• Advertising
• Marketing campaigns
• User profiling
• Selling or sharing data

3. Data Retention & Deletion

We retain your account information only while your account is active.

If you delete your account, your associated Google-provided data is removed from our systems within a reasonable timeframe.

You may also revoke Google Sign-In access at any time through your Google Account security settings.

4. Data Sharing & Disclosure

We do not sell, rent, or share your personal information with third parties.

Your data is shared only in the following limited cases:

• With Supabase, strictly for authentication and account management
• If required by law or legal process

No Google user data is shared with advertisers or data brokers.

5. Google API Services User Data Policy Compliance

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Google user data is used only for authentication
• Data is not used for any secondary purposes
• Data is not transferred to third parties except as necessary to provide authentication functionality

6. OAuth Scope Transparency

We request only the least-privileged OAuth scopes necessary to function.

If we ever request additional Google OAuth scopes in the future:

• This Privacy Policy will be updated
• You will be informed clearly before authorization
• Additional consent will be required

7. Security Measures

We take reasonable steps to protect your information, including:

• HTTPS encryption
• Secure authentication flows
• Restricted access to user data

While we follow best practices, no system can be guaranteed to be 100% secure.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Revoke Google Sign-In permissions at any time

To exercise these rights, contact us at soraddynamics@gmail.com.

9. Children’s Privacy

This Service is not intended for children under 13 years of age (or the minimum age required by applicable law). We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page.

Continued use of the Service after changes means you accept the updated policy.