Privacy policy

01 Introduction

Welcome to SEIRI (“we”, “our”, or “us”).

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect information when you access our website, use our services, or sign in using your Google account.

By using our services, you acknowledge the practices described in this Privacy Policy.

02 Information we collect

When you use our website, we may collect the following information:

Google account information. When you choose to sign in using Google OAuth, we may access:

• Your name
• Your email address
• Your Google profile picture
• Your Google account's unique identifier

This information is used to authenticate your account, create your user profile, and provide access to our services.

Information you provide. We may collect information you voluntarily provide, including account preferences, submitted content, and information necessary to deliver our services.

Technical information. We may collect technical information such as your IP address, browser type, device information, login activity, and application usage data, where applicable.

03 How we use your information

We use your personal information to:

• Authenticate users securely through Google OAuth.
• Create and manage user accounts.
• Provide and maintain our application's features.
• Personalise your experience and save account preferences.
• Prevent unauthorised access, fraud, or misuse.
• Diagnose technical issues and improve application performance.
• Respond to support requests and account-related enquiries.

We only request access to Google user information necessary for the functionality of our application.

04 Google OAuth authentication

Our application uses Google's OAuth 2.0 authentication service to provide secure account sign-in.

When you sign in using Google:

1. You are redirected to Google's authentication system.
2. Google requests your permission to share the specified account information.
3. Once authorised, our application receives the permitted information.
4. We use this information to authenticate your account and provide access to our services.

We do not receive or store your Google account password.

Signing in with Google does not automatically give us permission to access your Gmail messages, Google Drive files, contacts, or calendar.

Any additional access requires the appropriate Google permissions and must be disclosed to you.

05 Google API Services user data

Our application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including applicable Limited Use requirements.

Information obtained through Google APIs is used only for the purposes disclosed in this Privacy Policy and authorised by the user.

We do not sell Google user data to advertisers or data brokers.

We do not use Google user data to develop, improve, or train generalised artificial intelligence or machine learning models.

Any access, processing, storage, or sharing of Google user data is restricted to providing the application's disclosed functionality, maintaining security, complying with applicable law, and other uses expressly permitted by Google's policies.

06 Information storage and security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, or misuse.

These measures may include:

• Encrypted HTTPS communications.
• Secure authentication and session management.
• Restricted access to personal information.
• Appropriate access controls for application databases.
• Secure storage of authentication tokens where required.

While we take reasonable precautions to protect your information, no internet-based service can guarantee absolute security.

07 Sharing of information

We do not sell or rent your personal information.

We may share limited information with trusted service providers where necessary to operate our application, including hosting, database, authentication, and infrastructure providers.

Such providers may only process information for authorised purposes and subject to appropriate confidentiality and security protections.

We may also disclose information where legally required or necessary to protect the rights, security, and integrity of our application and its users.

08 Data retention and deletion

We retain personal information only for as long as necessary to operate our services, maintain user accounts, meet legitimate operational needs, or comply with applicable legal requirements.

Users may request deletion of their accounts and associated personal information by contacting us at admin@stllhaus.co.

Following a verified deletion request, we will delete or anonymise relevant personal information unless retention is required by law or another legitimate obligation.

Where applicable, residual information in backups will be removed according to our backup retention procedures.

09 Revoking Google account access

You may revoke our application's access to your Google account at any time.

To do this:

1. Visit myaccount.google.com/connections
2. Find our application under your connected services.
3. Select the application.
4. Remove its access to your Google account.

Revoking access prevents further authorised access through that connection but does not automatically delete information previously stored within our application.

To request deletion of stored information, contact us using the details below.

10 Cookies and session management

Our website may use cookies or similar technologies necessary for authentication, maintaining secure sessions, and remembering application preferences.

Where optional analytics or tracking technologies are implemented, we will provide appropriate information and obtain consent where required by applicable law.

11 Your privacy rights

Subject to applicable law, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Withdraw consent for optional data processing.
• Disconnect your Google account from our application.

We handle privacy requests in accordance with applicable privacy legislation, including the New Zealand Privacy Act 2020 where relevant.

12 Third-party services

Our application may integrate with third-party services, including Google Authentication.

These third-party services may process information according to their own privacy policies.

You can review Google's Privacy Policy at policies.google.com/privacy.

13 Changes to this privacy policy

We may update this Privacy Policy to reflect changes to our services, data processing practices, or legal obligations.

When changes occur, we will update the Last Updated date above and provide additional notification or obtain renewed consent where required.

14 Contact us

For questions, privacy concerns, requests to access personal information, or requests for account deletion, please contact:

Application: SEIRIOperator: Shayenne Gail D. GalisteEmail: admin@stllhaus.coWebsite: www.stllhaus.coLocation: New Zealand

We aim to respond to privacy-related enquiries within a reasonable timeframe and in accordance with applicable law.