Mega Shell

Privacy Policy

Last updated: August 19, 2026

Overview

Mega Shell is shared application infrastructure. It provides identity, authentication, tenant and user management, configuration, integration, communications, security, and audit services for the applications operated on the platform.

This policy explains what information Mega Shell collects in that role, why it is collected, and how it is handled. It applies to this website and to the Mega Shell platform services described on it.

Mega Shell's role

In most cases people do not use Mega Shell directly. They use an application that runs on the platform, and Mega Shell operates underneath that application — signing the person in, holding their account record, and enforcing what they are permitted to do.

Where Mega Shell handles information on behalf of an application operator, that operator determines the purposes for which the information is used within their application, and their own privacy notice may also apply to their use of it. This policy describes Mega Shell's own handling.

Information collected

Authentication and account information

  • Account identifiers used to identify an account within the platform.
  • Email address.
  • Basic profile information such as a name or display name, where it is provided or authorized by the person or their identity provider.
  • The identity provider used to sign in, and the identifier that provider assigns to the account.
  • Tenant and role information — which organization an account belongs to and what it is permitted to do.

Information from third-party identity providers

When someone chooses to sign in with a third-party identity provider, Mega Shell receives the basic identity information that the person and the provider authorize it to receive. Mega Shell does not receive the person's password from that provider. The specific information received from Google is set out in the Google user data section below.

Technical and security information

Operating an authentication service requires a record of how it is being used. Mega Shell processes technical information generated by requests to the platform, which may include:

  • IP address and general request metadata.
  • Browser and device information supplied by the browser, such as the user agent.
  • Sign-in events, session activity, and administrative actions, recorded for security and audit purposes.
  • Diagnostic and error information generated by the platform.

This website

This website is a static, informational site. It contains no analytics, no advertising pixels, no chat widgets, no behavioral tracking, and no third-party embeds. It sets no cookies. Fonts and images are served from this domain rather than from a third-party network, so simply reading these pages does not disclose your visit to another company. Routine server logs generated by the hosting provider that serves the site may record the request in the ordinary course of delivering it.

Cookies and session technologies

The public website does not use cookies. Where a person signs in to an application operated on the platform, Mega Shell uses cookies or equivalent browser storage that are strictly necessary to establish and maintain an authenticated session and to protect that session against misuse. These are not used for advertising, profiling, or cross-site tracking.

How information is used

Information described above is used for the following purposes:

  • Authentication. Verifying who someone is when they sign in.
  • Identity association. Connecting a verified sign-in to the correct account, tenant, and permissions.
  • Account and session security. Establishing and protecting sessions and detecting misuse of credentials.
  • Platform operation. Providing the configuration, integration, communications, and shared services the applications depend on.
  • Fraud and security monitoring. Identifying, investigating, and responding to suspicious or abusive activity.
  • Support and diagnostics. Investigating faults reported by an application operator or an account holder.
  • Legal and compliance. Meeting legal obligations and responding to lawful requests.

Google user data

When a person chooses Google as their sign-in method, Mega Shell may receive the basic identity information that the person and Google authorize, which is limited to:

  • the Google account identifier;
  • the email address associated with that account, and whether it is verified;
  • the name on that account;
  • basic profile information such as a profile picture, where provided.

Mega Shell requests Google account information for authentication and identity purposes only. It is used solely to:

  • authenticate the person signing in;
  • associate that verified identity with the correct Mega Shell account and tenant;
  • establish and secure the resulting session;
  • operate the platform and application services the person is signing in to use.

Mega Shell does not request or receive access to Gmail content, Google Drive files, Contacts, Calendar, browsing history, or any other Google service data. Google user data is not used for advertising, is not sold, is not used to build advertising profiles, and is not transferred to others except as described in Sharing below or as required by law. Mega Shell's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Access to Google account information can be withdrawn at any time from the Google account permissions page, at myaccount.google.com/permissions. Withdrawing it will prevent further sign-in with Google.

Sharing and service providers

Mega Shell does not sell personal information and does not share personal information for cross-context behavioral or targeted advertising. Information may be disclosed only in the following circumstances:

  • Application operators. To the operator of the application a person is using, so that the account can function within that application.
  • Service providers. To infrastructure and service providers that operate components of the platform on Mega Shell's behalf — for example hosting, database, email delivery, and monitoring providers — which may process information only as needed to provide those services.
  • Legal requirements. Where disclosure is required by law or legal process, or is necessary to protect the rights, safety, or security of Mega Shell, the applications on the platform, or their users.
  • Business transfer. In connection with a merger, acquisition, or transfer of the platform, subject to this policy continuing to apply to the information transferred.

Retention

Account and identity information is retained for as long as the account exists and for as long afterward as is necessary to meet legal, security, and record-keeping obligations. Security and audit records are retained for a period appropriate to their purpose. Information that is no longer needed for any of the purposes described in this policy is deleted or de-identified.

Security

Mega Shell applies technical and organizational measures appropriate to its role as an authentication and platform service, including encryption of data in transit, access controls over administrative functions, separation between tenants, and audit logging of privileged activity. No system can be guaranteed to be perfectly secure, and this policy does not promise a level of security beyond what is reasonable.

Your choices

  • Sign-in with a third-party identity provider is optional and can be revoked with that provider.
  • Requests to access, correct, or delete account information should normally be directed to the operator of the application the account belongs to, since that operator controls the account. Requests may also be sent to the contact address below and will be directed appropriately.
  • Depending on where you live, you may have additional rights over your personal information. Mega Shell will honor applicable rights when a request is verified.

Third-party identity providers

Identity providers such as Google are operated independently of Mega Shell and by their own privacy policies. Mega Shell does not control what those providers collect when a person authenticates with them, and this policy does not cover their handling of information.

Children

Mega Shell is infrastructure for business and organizational applications. It is not directed to children and does not knowingly collect information from children.

Changes to this policy

This policy may be updated as the platform changes. The revised policy will be posted at this address with an updated date. Material changes will be identified as such.

Contact

Questions about this policy or about information handled by Mega Shell: