Privacy Policy
This Privacy Policy explains how 12vectors ("we", "us") handles personal information when you use Sphinx, our single sign-on and identity service at sso.12v.sh (the "Service"), including when you choose to sign in with a third-party provider such as Google.
Information we collect
- Account information — your email address, display name, and, if provided, profile picture. You may enter these when you register, or we may receive them from a sign-in provider you choose to use.
- Authentication data — credentials you set up, such as a password (stored only as a salted, irreversible hash) and any multi-factor or passkey settings.
- Technical and security data — IP address, browser type, and timestamps, used to operate the Service, prevent abuse, and enforce rate limits.
- Cookies — strictly-necessary cookies that keep you signed in. We do not use advertising or cross-site tracking cookies.
Google user data
If you choose "Sign in with Google", Google shares your basic profile with us — your email
address, name, and profile picture (the openid, email, and
profile scopes). We use this information only to create and authenticate your
account and to confirm your identity to the applications you sign in to. We do not use Google
user data for advertising, and we never sell it. Sphinx's use of information received from
Google APIs adheres to the
Google
API Services User Data Policy, including its Limited Use requirements.
How we use your information
- To authenticate you and provide single sign-on to connected applications.
- To secure your account and to detect or prevent fraud and abuse.
- To send transactional messages such as email or phone verification and security notifications.
How we share your information
- Applications you sign in to — when you use Sphinx to access an application, we share your identity (such as your email address and name) with that application so it can sign you in.
- Service providers — vendors that host the Service and deliver notifications on our behalf, under obligations of confidentiality.
- Legal reasons — where required to comply with law or to protect the rights, safety, or security of users and the Service.
We do not sell your personal information.
Data retention
We keep your information for as long as your account is active. When your account is closed, we delete or anonymize your personal information within a reasonable period, except where we must retain it to meet legal obligations.
Security
We protect data in transit and at rest. Passwords are stored only as hashes and sensitive secrets are encrypted. No system is perfectly secure, but we work to protect your information using industry-standard measures.
Your choices and rights
You may access, correct, or delete your account information, or disconnect a linked sign-in method, from your account settings or by contacting us. Depending on where you live, you may have additional rights under applicable data-protection law.
Children
The Service is not directed to children and is not intended for anyone below the age at which they can consent to the processing of their personal data under the laws of their country.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date shown above.
Contact us
Questions about this policy or your data? Email support@12vectors.com.