Privacy Policy & Terms of Service

1. Information We Collect

When you sign in using Google OAuth or other supported identity providers, we may collect limited identity information including:

• Name
• Email address (when using Google Sign-In via Cognito)
• Basic profile information provided by your identity provider
• Session logs for security demonstration purposes

We may also collect technical and security-related information including:

• Authentication events
• Session timestamps
• IP address and browser metadata
• Approximate location (country) via IP geolocation
• Access logs and security monitoring events

2. How Authentication Works

This platform uses modern identity and authentication services including Google OAuth, Amazon Cognito, Cloudflare Access, and related cloud security technologies to provide secure access management.

Authentication and authorization data may be processed through cloud identity providers to validate user access and improve security.

3. How We Use Information

Collected information may be used for:

• User authentication and session management
• Security monitoring and fraud prevention
• Zero Trust access enforcement
• Platform analytics and operational troubleshooting
• Improving system reliability and security

JIT (Just-in-Time) accounts are automatically deleted within 3 minutes. Log data is retained for 30 days in CloudWatch.

We do not sell personal information to third parties.

4. Security Logging & Monitoring

Authentication requests, access attempts, and security events may be logged for platform security, auditing, fraud detection, abuse prevention, and operational monitoring.

Suspicious or abusive activity may result in temporary or permanent access restrictions.

5. Cookies & Session Management

This platform may use cookies, session tokens, or identity tokens to maintain secure authenticated sessions.

Disabling cookies may affect functionality and secure access capabilities.

6. Acceptable Use

Users agree not to:

• Attempt unauthorized access
• Disrupt or abuse platform resources
• Perform security attacks or scanning without authorization
• Use the platform for unlawful activities

7. Access Revocation

Access to this platform may be modified, restricted, or revoked at any time for security, operational, or administrative reasons.

8. Third-Party Services

This platform may rely on third-party cloud and identity providers including Google, Amazon Web Services (AWS), Cloudflare, and Okta/Auth providers.

Use of these services may also be governed by their respective privacy policies and terms.

9. Disclaimer

This platform is provided on an “as is” and “as available” basis without warranties of any kind.

While reasonable efforts are made to maintain availability and security, uninterrupted or error-free operation cannot be guaranteed.

10. Contact

For questions regarding this policy or platform usage, contact:

Email: amit@amitwebsite.online