Security

How we keep your data safe

• Each company's data is kept apart from every other company's by the database itself, not only by the application: a mistake in the application cannot show one company the records of another.
• Your data stays in India: Hostinger VPS, Mumbai, India.
• Everything travels encrypted and is encrypted where it is kept. Passwords are never stored, only a one-way fingerprint of them.
• Signing in is guarded: new passwords are checked against known leaks, a new browser is asked for a code sent to your email, repeated wrong tries lock the account for a while, and you can end your other sessions from your account.
• Every change is recorded in an audit trail that nobody, including us, can edit or remove.
• Files are scanned for viruses before anyone can open them.
• Backups are taken away from the server, kept for 35 days, and proved by restoring them regularly.
• Logs of what happened are kept for 180 days, in India.

Reporting a weakness

If you find a weakness in SourcePro, please write to privacy@sourcepro.example. Tell us what you found, where, and how to see it for ourselves. We reply within 3 days, tell you what we decide, and thank you if you wish.

What we ask of you:

• Use only your own account and your own test data; do not look at anyone else's.
• Do not slow the service down on purpose, send spam, or trick our people.
• Give us reasonable time to fix it before you tell anyone else.

We will not take action against anyone who reports in good faith and keeps to this. The same details are in security.txt.

About your own data

Questions about what we keep, and complaints, go to privacy@sourcepro.example, as the privacy policy says.