PoliTrade — Admin Console

Privacy Policy

Effective: June 23, 2026

This Privacy Policy describes how PoliTrade (“we,” “us,” or “our”) collects, uses, and retains information about authorized administrators who access this console. This is a private, invitation-only internal tool — it is not accessible to the general public.

1. Information We Collect

Authentication data. When you sign in via Google, we receive your email address and name from that identity provider solely to verify your identity and authorize access. We do not receive your password, payment information, or any data beyond what is necessary to authenticate you.

Audit log data. We log authentication events (sign in, sign out, sign in failures) and administrative actions (adding or removing administrators). These records include your email address, the action taken, and a timestamp.

Session data. We maintain an encrypted session token in your browser to keep you signed in. This token contains no personally identifiable information beyond what is necessary to identify your session.

2. How We Use Your Information

We use the information we collect solely to:

Authenticate and authorize your access to this console
Maintain audit records of administrative actions for security and accountability purposes
Operate and maintain the system

We do not use your information for marketing, advertising, profiling, or any purpose beyond operating this internal tool.

3. Data Storage and Security

All data is stored in a PostgreSQL database hosted on Railway (US East — IAD region). Data is encrypted in transit via TLS. Access is restricted to authorized administrators only.

4. Third-Party Identity Providers

Sign-in is handled by Google. When you authenticate, you are subject to Google's privacy policy. We only receive your email address and display name from this provider.

5. Data Retention

Authentication and audit log data is retained for the duration of system operation. If your administrator account is removed, your historical audit log entries are retained for security record-keeping purposes.

6. No Sale of Data

We do not sell, rent, trade, or otherwise transfer your personal information to any third party.

7. Your Rights

If you have questions about what information we hold about you, or wish to request deletion of your data, contact the system administrator who granted you access.

8. Changes to This Policy

We may update this policy from time to time. Continued use of the console following any changes constitutes acceptance of the updated policy.

Questions? Contact the system administrator.