Your Data, Protected.
We treat your business data the way we'd want our own treated. Strong encryption, regular audits, and compliance with the standards that matter.
AES-256 Encryption
Industry-standard encryption for data at rest. TLS/SSL for everything in transit between your browser and our servers.
SOC 2 Compliant
Our infrastructure follows SOC 2 controls covering security, availability, processing integrity, confidentiality, and privacy.
GDPR & Global Privacy
Full GDPR compliance for EU customers, plus alignment with India's DPDP Act, California's CCPA/CPRA, and other regional privacy laws.
Regular Audits
We run regular internal security reviews and engage third-party assessors to validate our controls. Findings are tracked to closure.
How We Handle Your Data
Your Data Belongs to You
You retain full ownership of every record, message, and file you store with us. Export anytime. Delete anytime. We don't sell your data, and we never share it with third parties for marketing.
Encryption Everywhere
All data is encrypted with AES-256 at rest. All connections use TLS/SSL. Sensitive credentials and API keys are stored using industry-standard secret management.
Access Controls
Role-based access controls limit who can see what. Multi-factor authentication is supported on all accounts. Internal access to customer data is logged and reviewed.
Data Retention & Deletion
When you close your account, we delete or anonymize your personal information within 90 days, except where retention is required by law. You can request export or deletion at any time before that.
Infrastructure
Our services run on secure cloud infrastructure with 24/7 monitoring. We follow defense-in-depth principles: network segmentation, least-privilege access, and automated alerting on anomalous activity.
Incident Response
If a security incident affects your data, we'll notify you promptly with a clear description of what happened, what we're doing, and what (if anything) you need to do.
Found a Security Issue?
We take security reports seriously. If you've discovered a vulnerability or want to share a concern, email our team and we'll respond within 24 hours.