ACS Chennai
Last updated: 15 October 2026
ACS Chennai is a construction project management consultancy based in Oragadam, Chennai. This page explains what information we collect when you sign in to the ACS Chennai employee portal, why we need it, and what we do — and do not do — with it.
ACS Chennai operates the employee portal at https://acschennai.com for our staff and authorised project team members. For any question on this policy, contact us at info@acschennai.com.
The portal offers sign-in with a Zoho account (for
@acschennai.com addresses) and, where enabled by an
administrator, with a Google account. When you sign in we receive from
your sign-in provider:
For Google sign-in, the portal also records the Google-issued subject
identifier (sub) on the operator-managed allowlist row
for your address. This opaque identifier is used only to confirm
that the same Google account is signing in on subsequent visits, and
to detect a recycled address. It is not used for any other purpose.
We do not see or store your Zoho or Google password. Authentication is handled entirely by your sign-in provider; we only receive the information above after you approve the sign-in prompt.
The portal is a project management tool. In the course of using it we store information necessary to its operation, including:
If you write to us through the website contact form or by email, we receive the name, email, phone, and message you provide. We use that information only to respond to your enquiry.
We use the information above to authenticate you as an authorised ACS Chennai employee or team member, to operate the portal, and to identify your activity inside it (who submitted which report, who approved which variation, who has completed which training). We do not use your information for marketing, advertising, profiling, or any purpose unrelated to your work with ACS Chennai.
We do not sell your information, and we do not share it with third parties for their own use. To operate the portal we rely on a small set of sub-processors, each of which receives only the data needed to perform its function:
| Sub-processor | Function |
|---|---|
| Supabase | PostgreSQL database hosting. |
| Cloudflare (R2 + CDN) | Object storage for uploaded files; content delivery for the public site. |
| Render | Hosting for the portal application. |
| Resend | Transactional email delivery (portal notifications, contact form). |
| Zoho | Sign-in identity provider (Zoho accounts only). |
| Sign-in identity provider (Google accounts only, where enabled). | |
| GitHub Pages & GitHub Actions | Static-site hosting and build pipeline for the public site. |
The portal does not use cookies. The session token that keeps you
signed in is stored in your browser's local storage under
the keys acs_auth and acs_refresh. A
small integer used to coordinate sign-in across multiple browser
tabs is stored under acs_session_gen. You can clear
these from your browser at any time; clearing them signs you out.
We do not use analytics tools, advertising trackers, or third-party session-replay services on the public site or in the portal. The only third-party script loaded by the portal is the YouTube player API, and only on the training pages when a video is opened.
Your portal account data is retained for as long as your account is active. If your employment ends, your portal account is removed in line with our standard HR retention practices. Email delivery audit records are retained for 90 days. Session tokens are short-lived: the access token expires after 15 minutes and the refresh token after 7 days, and you can revoke both at any time by signing out.
All portal traffic is encrypted in transit (HTTPS). Refresh tokens are stored as a one-way cryptographic hash, not in plaintext. The OAuth state token used during sign-in is held in process memory with a 5-minute time-to-live and is single-use. Access to the database and to file storage is restricted to the portal's own service identity.
You can stop using the portal at any time by signing out. If you would like to:
write to us at info@acschennai.com. We will respond to your request within a reasonable time.
If you signed in with Google and would like to revoke the portal's access to your Google account, visit https://myaccount.google.com/permissions and remove ACS Chennai Portal from the list of connected apps. Doing so prevents future sign-ins through Google until an administrator re-enables your account.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you have any grievance about how your information is handled, contact us at info@acschennai.com. We will acknowledge and respond to your grievance.
If we update this policy we will revise the “Last updated” date above. Material changes will be communicated through the portal before they take effect.