1. Introduction
At Orbivon (“Company,” “we,” “us,” or “our”), the security of our application (“Service”) and compliance with applicable regulations are of utmost importance. We are committed to protecting the confidentiality, integrity, and availability of our users’ data.
2. Data Centers and Hosting
- Infrastructure: Our Service is hosted on secure servers provided by reputable cloud service providers with industry-standard security measures.
- Physical Security: Data centers implement controlled access protocols such as biometric scans, surveillance, and on-site security personnel.
3. Data Encryption
- Encryption in Transit: All data transmitted between your devices and our servers is encrypted using secure protocols (e.g., TLS/SSL).
- Encryption at Rest: We encrypt stored data, including backups, using industry-standard encryption algorithms to protect against unauthorized access.
4. Access Controls
- Role-Based Access: We maintain strict role-based access controls (RBAC) to ensure that only authorized personnel can access sensitive systems and data.
- Authentication: We provide secure authentication methods, such as strong password requirements.
5. Vulnerability Management
- Regular Assessments: We perform routine vulnerability scans and penetration tests to identify and address potential weaknesses.
- Patch Management: Critical patches and updates are applied in a timely manner to minimize security vulnerabilities.
6. Compliance
We strive to comply with relevant data protection and privacy regulations, which may include:
- General Data Protection Regulation (GDPR): If you process data of EU residents, we have measures in place to support compliance with GDPR requirements.
- California Consumer Privacy Act (CCPA): For California residents, we provide data protection disclosures and mechanisms in line with CCPA.
- Other Jurisdictions: We may adapt our policies and practices to comply with data protection regulations in other jurisdictions where we operate or store data.
7. Incident Response
- Monitoring: Our systems are monitored for suspicious activities, and alerts are generated to identify possible security incidents promptly.
- Incident Management: We have an internal response plan to investigate and mitigate any security breach. In the event of a confirmed breach, affected parties will be notified in accordance with applicable laws and regulations.
8. Data Retention and Disposal
- Retention Policies: We only retain personal data for as long as necessary to fulfill the purposes outlined in our Privacy Policy.
- Secure Disposal: When data is no longer required, it is securely deleted or anonymized to prevent unauthorized recovery.
9. Third-Party Vendors
- Vendor Assessments: We conduct due diligence on our third-party service providers to ensure they meet our security and compliance standards.
- Data Sharing: Any data shared with third-party vendors is governed by contractual agreements that include confidentiality and data protection clauses.
10. User Responsibilities
While we implement robust security measures, users also play an essential role in safeguarding their data. We recommend:
- Keeping login credentials confidential and secure
- Using strong passwords and enabling multi-factor authentication (where available)
- Avoiding suspicious links or unauthorized software
11. Updates to This Statement
We may update this Security & Compliance Statement periodically to reflect changes in our security practices or compliance obligations. Any changes will be effective upon posting of the updated Statement. Your continued use of the Service after any modifications indicates acceptance of those changes.
12. Contact Us
For questions or concerns about our security measures or compliance, please reach out to:
Orbivon,
Lasan (Founder),
[email protected]