1. Protecting the connection and the data

• Full transport encryption overHTTPS/TLSacross every page of the platform, the dashboard and the APIs.
• Passwords are stored using one-way hashing algorithms, so they cannot be recovered as plain text by anyone.
• Sensitive data is encrypted at rest, and backups are protected to the same standard.

2. Payments

We do not store full card numbers or security codes (CVV) under any circumstances.Card data is processed directly by the licensed payment service provider under its own security standards. All that reaches us is the last four digits, the card type and the authorisation code, used solely for invoicing and refunds.

3. Access and permissions

• Least privilege: an employee reaches only what their task requires. Permissions are reviewed periodically and withdrawn as soon as the employment relationship ends.
• Logical separation between subscribers' data, so that no subscriber can reach another subscriber's data.
• Sensitive operations are logged and monitored, and two-factor authentication is available to subscribers.
• Staff and contractors are bound by confidentiality agreements and trained on data protection requirements.

4. Service continuity

We take regular backups and test our restore procedures, we monitor system performance and availability around the clock, and we apply security updates to software components and infrastructure as they are released.

5. If a security breach occurs

If a breach occurs within your own area of responsibility and affects data processed through the platform, you must notify us within twenty-four (24) hours of becoming aware of it.

6. Your own responsibility

Account security is shared, and we rely on you to:

• Use a strong, unique password and enable two-factor authentication.
• Never share login details or access keys (API Keys) with anyone.
• Set your staff's permissions in the dashboard and withdraw them as soon as your relationship with them ends.
• Keep independent backups of your own data and content.
• Tell us immediately if you suspect any unauthorised use of your account.

7. Reporting a vulnerability

If you discover a vulnerability or a security fault, please report it to[email protected]with a description of the issue and the steps to reproduce it. We undertake to respond within three (3) working days. We ask that you do not exploit the vulnerability, that you do not access, alter or destroy anyone else's data, and that you do not disclose it publicly before it has been addressed. We will take no legal action against anyone who observes these conditions and reports in good faith.

8. Limits of warranty

We exercise the care of an ordinary professional in securing the platform; even so, the security of no system or transmission over the internet can be guaranteed one hundred per cent (100%). This page is read as an integral part of the Terms and Conditions and the Privacy Policy published on the platform, and creates no obligation or warranty beyond what those documents contain.

9. Contact