This Privacy Policy explains how **ARCSAMS** collects and uses your data when you sign in through a supported identity provider (such as Google or Microsoft). We value your privacy and aim to be as transparent as possible regarding your personal information.
1Data We Collect
When you sign in with your organization or personal account, we access the following information via your identity provider's OAuth protocol:
- Primary Email Address
Google: userinfo.email · Microsoft: User.Read (mail)Used to identify and authenticate your account. - Basic Profile Info
Google: userinfo.profile & openid · Microsoft: User.Read (name, photo)Includes your name and profile picture URL for UI personalization.
2How We Use Your Data
3Data Sharing
We do not sell, trade, or share your data with third-party advertisers.
Data is retained for up to ten (10) years, or in accordance with HIPAA and 42 CFR Part 2 requirements, whichever period is greater.
4Your Control
You can revoke access at any time from your identity provider's security settings: Google Security Settings or Microsoft Security Settings.
Contact Us
If you have questions regarding this policy, please contact the ARCSAMS administration team.
Platform usage, data ownership, and consent rules are in the Usage and Policies.
Last updated: September 15, 2026