Privacy
This page describes only what this portal actually does.
What this portal holds
Your name and email address, the password you set, the documents prepared for you, and a record of when each document was viewed or downloaded.
Passwords are stored only in a protected, one-way form. Nobody, including the administrator, can read your password.
Who can see your documents
Only you and the portal administrator. Documents are stored privately and can never be reached through a public web address. Each time you open or download a document, the portal issues a private link that stops working after a few minutes.
Access records
The portal records the date and time a document is first viewed and most recently opened or downloaded. This is used to confirm delivery. The content of your documents is never copied into these records.
Emails
The portal sends only two kinds of email: password reset and account access messages, and a short notice that a new document is available. Notices never contain the document, its title or a direct link to it.
Security information
Signing in requires an email address and a password. Passwords are stored only in a protected, one-way form, must be at least twelve characters with upper and lower case letters and a number, and are checked against known breached passwords. A password issued to you for a first sign-in must be replaced before the portal can be used.
Documents are held in private storage with no public web address. Each view or download is served through a private link that expires after a few minutes and is issued only after the portal has confirmed the document belongs to your account.
Every request for a document or an administrator action is re-checked on the server, not just in your browser, and suspended accounts lose access immediately. Deleting a document permanently requires the administrator to re-enter their password.
Cookies
The portal stores a single sign-in token in your browser so you stay signed in. There is no advertising or third-party tracking.
How long information is kept
Documents and access records are kept for 12 months. Nothing is removed automatically at present; the period is applied by the administrator and can be revised.
Contact
For any question about your information, write to bsappsupport@gmail.com.