Security and Data Protection
In this section, we outline the key frameworks and measures for safeguarding the security and privacy of user data on Altpaths.io. We first cover the global standards we comply with, then describe the technical safeguards in place to protect information. We also explain our principles of data minimization, transparency, role-based access control, and our procedures for notifying users in the event of a data breach.
Global Privacy Standards
GDPR Compliance
- Altpaths.io operates in full compliance with the European Union’s General Data Protection Regulation (GDPR).
- Users may request access to, correction of, or deletion of their personal data at any time; we respond to such requests within 30 days.
CCPA Compliance
- We adhere to the California Consumer Privacy Act (CCPA), ensuring that personal information of California residents is not sold to third parties without explicit consent.
- California users have the right to know what data we collect and to request its deletion; we fulfill deletion requests within 45 days.
Technical Data Protection
Encrypted Communications (SSL/HTTPS)
All traffic between users and our site is secured via HTTPS with SSL/TLS certificates to prevent interception or tampering of data in transit.
Secure Password Storage
User passwords are stored using salted hashing techniques to resist brute-force and rainbow-table attacks.
No Unauthorized Data Sharing
We never sell or share personal data with third parties without user consent; when data transfers are necessary (e.g., payment processing), we use Data Processing Agreements to enforce strict protections.
Data Minimization
We collect only the minimum information needed to provide our services (for example, an email address to send reports) and delete any unnecessary data promptly.
Account and Data Deletion
Users can request deletion of their account and all associated data at any time; we complete such deletions within four weeks in accordance with GDPR requirements.
Transparency in Data Use
- Our Privacy Policy clearly explains why and how we collect and use user data (e.g., to improve analysis algorithms or send update emails).
- Users can manage their data-sharing preferences at any time through their privacy settings.
Role-Based Access Control (RBAC)
- Access to sensitive data is granted only to team members who require it to perform their duties (e.g., system administrators, data analysts, support staff).
- Our RBAC system ensures no one has more access than necessary.
Breach Notification
- In the event of any unauthorized access or data leak, Altpaths.io will notify regulatory authorities within 72 hours, as required by GDPR, and will directly inform any affected users as soon as possible.