Google sign-in privacy

HELIO uses your Google account identifier and verified Gmail address to check the administrator-managed access list and create your sign-in session. These login details are not sent to the AI or video services. We request only account identity and email permissions. We do not request mailbox, contacts, calendar or Google Drive access. Google handles authentication; the app is hosted on Alibaba Cloud. The sign-in session is stored in server memory for up to eight hours and ends when you sign out or the server restarts. The administrator keeps approved Gmail addresses in a private access policy until removed. OAuth transaction state is temporary. Provider access and refresh tokens are not retained. IP addresses are used in memory for sign-in rate limiting. For access changes or questions, contact bohan2001@gmail.com.