The app stores only what is required for administration and auditing:
- Site Administrator's email address
- Site Administrator's API token
- Portal-only customer Account ID, stored solely for audit-log purposes
API tokens are stored and managed following industry-standard security best practices.
