CH Labs sign-in
privacy notice.

Effective September 15, 2026. This notice describes the shared Google sign-in service operated by CH Labs.

Information we use

When you sign in with Google, we receive your Google account identifier, email address and verification status, display name, and profile picture URL when available. We use these details to identify your account and show your profile in the product you are signing into.

We store product-scoped user and provider identity records, session token hashes, and session creation, expiry and revocation timestamps. Temporary OAuth records verify sign-in attempts. Authentication event records contain the product and environment, event type, request identifier, timestamp, and a failure code when applicable.

Use and sharing

We use this information to authenticate you, maintain your session, apply product access rules and investigate authentication failures. Authorized services for the product receive the user identifier and profile needed to provide that product. Records are scoped by product and environment.

This Google sign-in flow does not request access to Gmail messages, Drive files or Calendar. Google processes your authentication under its own privacy policy. Headquarters also uses Cloudflare Access as an additional access layer; Cloudflare processes access requests under its applicable service policies. Our hosting and network providers process requests needed to deliver the service.

Cookies and security

We use session and temporary sign-in cookies. HTTPS authentication cookies are marked Secure and HttpOnly. Signing out revokes your session; it does not delete your account or historical records. Expired or revoked sessions cannot be used to sign in.

Storage and retention

Authentication records are currently stored in a database on CH Labs-managed infrastructure. Records remain stored until removed through an administrative process. The service does not currently automatically erase all expired session or audit records. We review retention and removal requests individually; session expiry is separate from deletion.

Your requests

For questions or requests to access, correct or delete your sign-in information, contact jaehyunha@chlabs.ai and identify the product concerned. We may need to verify your identity before acting. We will explain any information that must be retained for security, legal or operational reasons. You can also manage Google account connections in your Google Account; removing a connection does not itself erase records already held by CH Labs.

Other product data

This notice covers shared Google sign-in. Participating products may process other information and should describe that processing separately. Our shared billing service currently operates in test mode; this notice does not describe live payment processing.

Updates

We will update this page when the described processing changes and show the effective date above.