Public information

Privacy notice

This notice explains the information handled when you use Clio Museum Mail, the organisational email service operated by Clio Museum.

Identity and sign-in

Clio Museum Mail can use Google or Microsoft to authenticate an invited user. It requests the basic openid, email and profile scopes and receives a stable account identifier, an email address and a name. Google may also return a profile-picture claim, but cmail does not store it. Microsoft supplies a provider-asserted email address without a separate email_verified claim.

The service stores the identity provider and stable account identifier needed to bind future sign-ins to the invited account. It may store the email address and name when provisioning or completing that account. OAuth access and refresh tokens are not retained. These identity details are used for authentication and access control, not advertising or sale. The service does not request access to a personal inbox, Drive, contacts, files or search history.

Mail service information

The service handles the mailbox addresses, messages, attachments, contacts and settings needed to provide assigned personal and shared mailboxes. It also records session, security and audit information needed to operate and protect the service.

Service providers

Google or Microsoft processes the sign-in request. The account binding is stored in the deployment’s configured hosting environment and is shared only with configured service providers where needed to operate the service. The deployment operator selects and configures the hosting, storage, mail-routing and delivery providers. Their own terms and privacy information apply to their services.

Questions about this deployment

For privacy or account questions, contact support@cliomuseum.org.

The organisation operating this deployment is responsible for its own privacy decisions, notices, retention settings and applicable legal obligations. This notice describes the service’s current product behaviour and should be reviewed when the deployment configuration changes.