Privacy policy

This policy explains how the Sandra Rathe staff application uses Google sign-in information and the business records entered by authorized staff.

Google information

The application requests the openid, email and profile scopes. It uses the Google account identifier, email and verification status, available profile information, and signed authentication-time and authentication-method evidence to verify staff identity and enforce access and session security. Google sign-in does not grant access automatically. The application does not request access to Gmail messages, Google Drive files, contacts or calendars.

Purpose and storage

Identity mappings, roles, session and revocation records, and security audit and recovery evidence are stored in private application storage. Authorized staff also enter listing, seller-contact, showing, feedback, marketing and report records for the team's property-reporting work. Contact information alone does not create a login or permission to send messages.

Access and service providers

Access is limited by staff role and property authorization. Google provides authentication and GoDaddy hosts the application. An authorized email service may process specifically approved communications when delivery is commissioned. Google identity data is not sold, used for advertising or provided to a live AI or IDX service. Operational backups and recovery material are restricted to approved custodians.

Retention and requests

Identity and security records are retained for access control, auditing and recovery. Business records and report history are preserved under the team's operating rules. Retention and deletion requests are reviewed by the authorized operator, including any need to preserve security, recovery or business records. This policy does not promise an automatic deletion period that has not been configured.

For questions or requests concerning access, correction, retention or deletion, contact sandra@sandrarathe.com.

Staff access and current delivery state

Seller login is not offered. Outbound email and automatic scheduling remain disabled until separately commissioned. Changes to live service providers or data use require review and an updated policy.