Privacy Policy

1. Overview

WaterPath is an internal collaborative food ordering tool for amira.vn employees. This Privacy Policy explains what information we collect when you sign in with Google, how we use it, and your rights regarding your data.

2. Information We Collect

When you sign in using Google OAuth, we receive from Google:

• Your Google account email address
• Your Google account display name

We do not collect passwords, phone numbers, profile photos, or any other Google account data.

3. How We Use Your Information

Your email and display name are used solely to identify you within WaterPath — to associate food orders with your account and display your name to other members of the same order group. We do not use your information for marketing, analytics, or any purpose outside of the app's core ordering functionality.

4. Data Storage

Your email, display name, and linked secondary email (if you add one) are stored in a MongoDB database hosted within amira.vn infrastructure. WaterPath stores the minimum account information needed to identify you in shared food orders and keep your profile linked to your sign-in identity.

5. Cookies and Browser Storage

WaterPath uses required browser cookies to complete Google sign-in and maintain your app session. These cookies include a short-lived app access token, a refresh token, and a temporary OAuth state cookie used during the Google sign-in flow.

These session cookies are set as HttpOnly cookies, which means they are intended to be inaccessible to client-side JavaScript. WaterPath does not store app authentication tokens in browser localStorage or sessionStorage. Your browser may still retain normal cached files and browser-managed Google sign-in state outside WaterPath's direct control.

6. Data Sharing

We do not sell, rent, or share your personal information with any third parties. Your data is only accessible to other amira.vn employees using WaterPath, and only in the context of shared food orders.

7. Data Retention

Your account information is retained for as long as you use WaterPath. If you would like your data removed, please contact the system administrator.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting the WaterPath administrator at your organisation.

9. Contact

For any questions about this Privacy Policy or your data, please contact the WaterPath administrator at amira.vn.