1. Who we are
DTG Auth, at auth.atdtg.com, is the sign-in service for Datatech Genius products. It is operated by [LEGAL ENTITY NAME] ("Datatech Genius", "we", "us"), [REGISTERED ADDRESS].
For the personal information described here, Datatech Genius is the data controller. Each Datatech Genius product you use may also have its own privacy policy covering the data it holds.
2. What we collect
Account information
- Your email address and display name.
- Your password, stored only as a one-way salted hash. We cannot read it.
- Whether your email address is verified, when your account was created, and when you last signed in.
Sign-in with Google or Microsoft
If you choose to sign in with Google or a Microsoft work account, we receive the provider's identifier for you and your email address. For Microsoft work accounts we also receive your organization's directory (tenant) ID. We never receive your Google or Microsoft password.
Organizations
- The organizations you create or join, and your role in each (owner, admin or member).
- Invitations you send or receive, including the invited person's email address.
- The organization you last selected, so we can return you to it.
Security and activity records
We record security-relevant events such as sign-ins, failed sign-in attempts, password resets and changes to memberships. Each record includes the time, your IP address and your browser's user agent.
Products and consent
We record which Datatech Genius products you have signed in to and the permissions you have granted them.
Messages you send us
If you use our contact form or email us, we keep your name, email address and message so we can reply.
3. How we use it
- To provide the service: create your account, sign you in, verify your email and reset your password.
- To manage organizations: show your memberships, send invitations, and let administrators manage members.
- To sign you in to Datatech Genius products you choose to use.
- To keep accounts secure: detect and block suspicious sign-ins, lock accounts after repeated failures, and investigate incidents.
- To send service emails: verification codes, password resets and invitations. We do not send marketing email from DTG Auth.
- To meet legal obligations.
Our legal bases are performing our contract with you, our legitimate interest in keeping the service secure, and compliance with law [CONFIRM FOR YOUR JURISDICTION].
We do not sell your personal information and we do not use it for advertising.
4. What Datatech Genius products receive
When you sign in to a Datatech Genius product, DTG Auth sends it only what it asked for and you agreed to. That can include:
- A stable identifier for your account.
- Your email address and display name.
- The organizations you belong to and your role in each.
What you may do inside a product is decided by that product, not by DTG Auth.
5. Cookies
DTG Auth uses only cookies that are strictly necessary for signing in and keeping it secure. We do not use analytics or advertising cookies [CONFIRM BEFORE PUBLISHING].
| Cookie | Purpose | Duration |
|---|---|---|
| Session | Keeps you signed in. | Ends after 8 hours of inactivity |
| External sign-in | Completes sign-in with Google or Microsoft. | Up to 15 minutes |
__Host-dtg-antiforgery | Protects forms against cross-site request forgery. | Browser session |
6. Who we share it with
- Datatech Genius products you sign in to, as described above.
- Your organization's owners and admins, who can see your name, email address and role in that organization.
- Google or Microsoft, when you choose to sign in with them.
- Service providers that run the service for us under contract: hosting [HOSTING PROVIDER] and email delivery [EMAIL PROVIDER].
- Authorities, when the law requires it.
7. How long we keep it
- Account and organization data: while your account is open, and deleted within [X DAYS] after you close it.
- Security and activity records: [X MONTHS].
- Email verification and password reset codes: until they are used or expire.
- Contact messages: [X MONTHS] after we resolve your request.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict how we use it. You can update your name and password from your profile at any time. For anything else, contact us and we will respond within [X DAYS].
If your account belongs to an organization that connected its Microsoft Entra directory, some requests may need to go through that organization's administrator.
You also have the right to complain to your data protection authority [NAME THE AUTHORITY].
9. Security
All traffic uses HTTPS. Passwords are stored only as salted hashes, accounts lock after repeated failed attempts, and products sign in using the authorization code flow with PKCE, with every redirect address registered exactly in advance. No system is perfectly secure; if you believe your account has been compromised, tell us right away.
10. International transfers
Your information is stored in [REGION]. Where it is transferred across borders, we use [SAFEGUARD, e.g. standard contractual clauses].
11. Children
DTG Auth is not intended for anyone under [16]. We do not knowingly collect their information.
12. Changes to this policy
If we make material changes, we will update the date above and notify you by email or in the service before they take effect.
13. Contact us
Questions or requests about your privacy: info@datatechgenius.com, or use our contact form.
[LEGAL ENTITY NAME], [REGISTERED ADDRESS]