Trust & Safety

Security & Compliance

Your data security is our top priority. Learn how we protect your information and maintain compliance with industry standards.

Security Measures

We implement industry-leading security practices to protect your data.

🔐

Encryption

All data transmitted between your browser and our servers is encrypted using industry-standard TLS/SSL protocols.

  • 256-bit AES encryption for data at rest
  • TLS 1.3 for data in transit
  • Regular encryption key rotation
🛡️

Authentication

We use secure authentication methods to verify user identity and prevent unauthorized access.

  • Two-factor authentication (2FA) available
  • Secure password hashing with bcrypt
  • Session timeout and automatic logout
🔍

Monitoring & Auditing

Continuous monitoring and regular security audits ensure we detect and respond to threats quickly.

  • 24/7 security monitoring
  • Quarterly penetration testing
  • Regular security audits and updates
🚨

Incident Response

We have a comprehensive incident response plan to quickly address any security issues.

  • Dedicated security team on-call
  • Rapid response protocols
  • User notification procedures
🏢

Infrastructure Security

Our infrastructure is hosted on secure, redundant servers with multiple layers of protection.

  • Cloud-based infrastructure with DDoS protection
  • Firewalls and intrusion detection systems
  • Regular backups and disaster recovery
👥

Access Control

We restrict access to user data to authorized personnel only, with strict role-based controls.

  • Role-based access control (RBAC)
  • Principle of least privilege
  • Regular access reviews and audits

Compliance & Certifications

We comply with major data protection and security standards.

  • GDPR Compliant: We comply with the General Data Protection Regulation for EU users.
  • CCPA Compliant: We respect California Consumer Privacy Act requirements.
  • SOC 2 Type II: Our systems have been audited and certified for security, availability, and confidentiality.
  • ISO 27001: We maintain information security management standards.
  • PCI DSS: Payment card data is handled in compliance with PCI Data Security Standard.

Data Protection

Your data rights and how we handle your information.

Your Rights

  • Right to Access: You can request a copy of all personal data we hold about you.
  • Right to Correction: You can request correction of inaccurate or incomplete data.
  • Right to Deletion: You can request deletion of your data, subject to legal requirements.
  • Right to Data Portability: You can request your data in a portable format.
  • Right to Opt-Out: You can opt-out of marketing communications at any time.

Report a Security Issue

If you discover a security vulnerability, please report it responsibly.

Email our security team with details of the vulnerability. We take all reports seriously and will investigate promptly.

Report Security Issue