Privacy during access validation

This environment tests sign-up, email verification, login and password recovery. Name, email, password and codes are sent over HTTPS to the AWS identity service. Amazon Cognito manages credentials; the identity service does not store passwords.

Sessions use necessary Secure, HttpOnly cookies. Refresh tokens are encrypted on the server; access tokens stay only in page memory. No marketing cookies are used. Service operational logs have a 14-day retention period and exclude passwords, codes, tokens and request bodies.

When enabled, Google shares only the requested identity attributes: name and email. User accounts are independent of the technical bot account. This environment also stores private documents and meeting history per account. Originals and versions remain in private S3 storage until explicit deletion, with limits of 10 MB per file and 100 MB per user. When you start a meeting, captions and selected document excerpts may be sent to OpenAI to prepare answers. The application does not record meeting audio. Inform participants before inviting Athena.