Data Protection
We implement comprehensive security measures to protect your personal information and ensure compliance with data protection regulations.
Technical Security Measures
All data is encrypted both in transit (TLS 1.3) and at rest using industry-standard AES-256 encryption.
Our servers are hosted in SOC 2 Type II compliant data centers with 24/7 monitoring and physical security.
Multi-factor authentication and role-based access control ensure only authorized personnel can access data.
Regular automated backups with point-in-time recovery ensure data availability and integrity.
Data Processing Locations
Primary Data Centers
- • United States (AWS US-East)
- • European Union (AWS EU-West)
- • Australia (AWS AP-Southeast)
CDN Locations
- • Global edge locations
- • Static content only
- • No personal data stored
Data Residency
- • EU data stays in EU
- • Compliance with local laws
- • No unauthorized transfers
Data Retention Policies
Account Data
Active account information
Analytics Data
Anonymous usage statistics
Logs & Security
Server logs and security events
Marketing Data
Newsletter and communications
Support Tickets
Customer support history
Financial Records
Payment and billing data
Third-Party Processors
We work with carefully selected third-party processors who meet our strict security and privacy standards:
Hosting & Infrastructure
- • Amazon Web Services (AWS)
- • Cloudflare (CDN & Security)
- • Vercel (Static hosting)
Analytics & Monitoring
- • Google Analytics (Optional)
- • Microsoft Application Insights
- • Sentry (Error tracking)
All third-party processors are bound by Data Processing Agreements (DPAs) and meet GDPR requirements. You can find a complete list of our subprocessors in our Privacy Policy.
Incident Response
Detection & Response
- • 24/7 security monitoring
- • Automated threat detection
- • Incident response team on standby
- • Regular security assessments
Breach Notification
- • Supervisory authorities within 72 hours
- • Affected users notified promptly
- • Transparent incident reporting
- • Post-incident security improvements
Data Protection Officer
Our Data Protection Officer (DPO) oversees all data protection activities and serves as your point of contact for privacy matters.
Contact Information
Email: [email protected]
Response time: Within 30 days
Available for: Privacy questions, data requests, complaints