Privacy Policy

A draft outline describing how the future QLYNK identity service should explain its data practices.

1. Account information

The final policy will describe the account details collected, why each item is required, how long it is retained and how users can request correction or deletion where applicable.

2. Data shared with connected apps

Connected apps should receive only the information and permissions approved for that app. Account passwords, recovery secrets and other products' private data must not be exposed through a general identity token.

3. Sessions and security events

The production service may record security events needed to protect accounts. Logs should not contain passwords, client secrets or raw access tokens.

4. Retention and deletion

Retention periods, account closure and data-deletion procedures will be documented before the service is used with real accounts.

5. Policy status

This is only a static draft. It does not describe a currently operating data collection service and is not the final privacy policy.