Is there security documentation for Maton's OAuth token handling?

Ideas / Feedback
1

Hey! :waving_hand:

First off, great job on this — the setup is incredibly intuitive. Getting connected to apps through the gateway took me like 10 minutes, which is honestly impressive.

That said, with all the security issues that have been popping up around the OpenClaw ecosystem lately (malicious skills, credential leaks, etc.), I’m being extra cautious about anything that touches OAuth tokens.

So my question is: is there any security documentation available for Maton? Specifically around how tokens are stored and protected, what happens in case of a breach, and where the infrastructure is hosted?

Also noticed the privacy policy page (toolkit.maton.ai/privacy-policy) seems to be empty — is there a proper one somewhere?

Thanks! :folded_hands:

2

Hey, thanks! We don’t have security documentation at the moment. We store your access tokens encrypted with a rotating service encryption key and do not store your API response data. Security is a top priority for us, and we’ll add more features and documentation going forward. You can find our privacy policy here (Maton). Let us know if you have any other questions.