Privacy policy
This Privacy Policy describes how CIO CTO Consulting (“we”, “us”) operates the CIO CTO Consulting authentication service and related websites at https://www.cioctoconsulting.com/ and how we access, use, store, and share information, including Google user data obtained through Google OAuth / Google APIs.
1. Who we are
CIO CTO Consulting is a technology advisory firm. The CIO CTO Consulting authentication app lets clients, partners, and team members sign in with Google to access our websites, client portals, and related consulting tools.
Privacy: privacy@cioctoconsulting.com
Support: support@cioctoconsulting.com
Operator: CIO CTO Consulting
2. Google user data we access
When you sign in with Google, we request only the scopes needed to authenticate you. After you grant permission on Google’s consent screen, we access:
Basic Google Account profile: Google account ID, name, email address, and profile photo, using the OpenID, email, and profile scopes.
We do not request Gmail, Calendar, Drive, Contacts, or other Google Workspace scopes. We do not access Google user data except through official Google APIs after you authorize the app.
3. How we use Google user data
We use Google user data only to provide or improve user-facing features:
Create and authenticate your CIO CTO Consulting account
Confirm you are a permitted client, partner, or team member
Display your name, email, and photo in our applications
Send account, security, and service messages
We do not use Google user data for:
Targeted, personalized, retargeted, or interest-based advertising
Selling data to data brokers or information resellers
Determining credit-worthiness or lending
Building marketing or surveillance databases
Developing, improving, or training generalized or non-personalized AI / ML models
Use of Google user data is limited to the practices disclosed in this policy and to Google’s API Services User Data Policy, including Limited Use.
4. How we store Google user data
After you sign in, we store the Google account identifiers needed to keep you logged in: Google user ID, name, email, profile photo URL, and OAuth tokens. Tokens are stored encrypted at rest and transmitted only over HTTPS.
Data is stored on secure cloud infrastructure used to operate cioctoconsulting.com and related applications.
Security measures include HTTPS in transit, encryption at rest for tokens and credentials, access limited to personnel who need it to operate the service, and account authentication controls.
5. How we share Google user data
We do not sell Google user data. We do not share Google user data with third parties for advertising or data-broker purposes.
We may share Google user data only:
With infrastructure processors that host or operate CIO CTO Consulting systems on our behalf, bound to use the data only to provide those services
When required by law, legal process, or to prevent fraud or abuse
As part of a merger, acquisition, or sale of assets, with notice where required
With your direction or explicit consent
Humans at CIO CTO Consulting do not read your Google user data except as needed to operate the product, fix bugs, investigate abuse, or comply with law.
6. Retention and deletion
We keep Google user data only while your account is active and as needed to provide authentication and related services, unless a longer period is required by law.
You can delete your data by emailing either:
When you request deletion, we delete or irreversibly de-identify associated Google user data from our systems within 30 days, except data we must retain for legal, security, or dispute purposes.
You can also revoke CIO CTO Consulting’s access to your Google Account at https://myaccount.google.com/permissions. Revoking access stops future Google API access. It does not automatically delete data already stored by us; request deletion as above.
7. Other information we collect
Separate from Google APIs, we may collect:
Information you submit through our websites or portals
Basic technical logs (IP address, browser, timestamps) used for security and reliability
Cookies or similar storage needed to keep you signed in
We do not use third-party advertising cookies on the authentication service.
8. Children
CIO CTO Consulting services are not directed to children under 13 (or the age required in your country). We do not knowingly collect Google Account data from children.
9. Changes
If we change how we access, use, store, or share Google user data, we will update this policy, post the new date above, and obtain any additional consent required before using data for a new purpose.
10. Contact
Privacy questions or deletion requests:
privacy@cioctoconsulting.com
General support:
support@cioctoconsulting.com