Google API Services disclosure

1. Where Google APIs are used

Softra offers optional "Continue with Google" sign-in for administrators, employees, and job applicants. Google sign-in is never required; email and password sign-in is always available.

2. Scopes requested and why

• openid - to authenticate you and establish a Softra session.
• https://www.googleapis.com/auth/userinfo.email - to identify your account and match it to your workspace membership or applicant record.
• https://www.googleapis.com/auth/userinfo.profile - to display your name and profile picture in the product.

Any additional scope is requested separately only for an available, authorized feature, with its purpose explained before consent.

3. What we store

• Google account identifier, email address, name, and profile picture URL, linked to your Softra user record.
• Authentication events (time, IP address, result) in security logs.

Softra does not store your Google password. The identity scopes above do not grant access to the contents of your Google services.

4. Limited Use commitment

Softra's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely, Google user data:

• is used only to provide or improve the authorized user-facing feature that requested it;
• is not transferred to others except as needed to provide or improve that feature, to comply with applicable law, or as part of a merger or acquisition;
• is not used for advertising of any kind;
• is not sold and is not shared for cross-context behavioural advertising;
• is not used to train generalized artificial intelligence or machine learning models;
• is not read by humans, except with your explicit consent, for security purposes such as investigating abuse, to comply with applicable law, or where the data is aggregated and de-identified.

5. Revoking access

You can remove Softra's access at any time at myaccount.google.com/permissions. Revoking disables Google sign-in for your account; you can continue with email and password, or reset your password from the sign-in page.

6. Deleting Google data we hold

Email privacy@softraglobal.com from the address used with Google and ask us to delete data received from Google APIs, or use the privacy request form. We verify identity and authority, respond within the period required by applicable law and explain any necessary security-record or legal-retention exception. Removing access does not by itself erase Softra records.

7. Security

Account sessions and connection credentials are subject to access controls. Server-held connection credentials are protected at rest. Keep signed-in devices secure and sign out on shared devices. See Security for detail.

8. Related pages

Privacy Notice, Terms of Service, Data Processing Addendum, Sub-processors.