Use of Firebase Third-Party Service

Powertech Multi-Factor Authentication uses the following third-party service while sending notifications to mobile devices (phones/tablets) that are running the Powertech Multi-Factor Authentication mobile app:

• Name of service: Firebase Cloud Messaging
• Service provider: Google, LLC

The following Terms of Service apply:

• Google APIs Terms of Service
• Firebase Data Processing and Security Terms

Data processed by the service provider in the provision of the service may include, without limitation, the following types of data:

• IP addresses.
• Mobile device UUID (unique identifier, so that Google/Firebase knows where to route the message). This ID is provided by the device when the user performs a sync. It is the same ID that is used by all mobile devices that use Firebase Cloud Messaging to perform push notifications.
• The user's Powertech Multi-Factor Authentication ID.
• Authentication prompt (i.e. information about the authentication attempt, for example "User XYZ is trying to authenticate on system ABC. Press Accept to authenticate.").

• A function ID that identifies whether the push notification requires biometric validation on the mobile phone in order to proceed (this differentiates between a push notification and a biometric notification).

  NOTE: The function ID does not contain biometric data.

Some or all of the types of data processed by the service provider in the provision of the service may be considered personal data/personally identifiable information under the data processing laws and regulations that apply to your organization.