Security
Access should be explicit, limited and reviewable.
Our security direction is based on least-privilege access, protected credentials, explicit authorization, auditability and a clear data-deletion path.
Authorization
Connected accounts require explicit authorization and appropriate permissions.
Credential handling
Passwords, API secrets and OAuth tokens are treated as sensitive credentials and should not be sent through ordinary email.
Data minimization
Collect and retain only data needed for the disclosed operating purpose.
Deletion
Users can request deletion of stored account, connection and authorized platform data.