Privacy and records

Kayne Company operates Thrum for private, authorized product review.

Sign-in and access

Google verifies the account you select. We retain an internal operator reference, display name, Google issuer, a keyed digest of the Google account identifier, and approved access grants. The sign-in proof is processed transiently and is not stored as an application record. This sign-in flow does not request access to Gmail, Drive or Calendar.

Sessions and operational records

A secure cookie supports browser sessions for up to 15 minutes. Sign-out and service restarts invalidate sessions. We retain product-scoped operational records and security audits, including sign-in, sign-out, authenticated reads and applicable access denials. Application request logs include request identifiers, status, timing and environment metadata. Staging uses synthetic evidence only.

Retention and deletion

Operator records and security audits are retained while the service operates. Access is disabled when revoked. Deletion requests are reviewed manually through admin@kaynecompany.com; there is no automatic deletion deadline.

Service providers and recovery

Google handles the Google sign-in interaction and Railway provides application hosting. Their services have their own data-processing practices. A permanently lost identity requires separately verified, explicitly approved replacement. Access remains disabled until recovery is completed.