Q: I like the idea of this service but I have some questions as I could not find any info documented explaining ...
the security and privacy steps taken for users on this platform.
=====================
== PRIVACY QUESTIONS ==
=====================
1. **Data Encryption**:
- Is the data transmitted over secure channels (HTTPS)?
- Is sensitive information stored in an encrypted format?
- What encryption protocols are being used?
2. **Access Control**:
- How is access to sensitive data controlled?
- Are there role-based access controls (RBAC) in place?
- Who has access to my data?
3. **Data Retention and Deletion**:
- How long is my data retained?
- Is there a process for data deletion upon request?
- Are there data retention policies in place?
4. **Third-Party Services**:
- Are any third-party services or APIs integrated, and how do they handle data?
- Are these services compliant with data privacy regulations?
5. **Compliance with Regulations**:
- Does the app comply with relevant data protection laws (e.g., GDPR, CCPA)?
- Are there measures in place for compliance with industry-specific regulations?
6. **Data Ownership and Sharing**:
- Who owns the data once it's submitted to the app?
- Is my data shared or sold to third parties?
=====================
== SECURITY QUESTION ==
=====================
1. **Authentication**:
- What authentication methods are in place (e.g., password, multi-factor authentication)?
- Is there a password policy, and what are the requirements?
2. **Password Storage**:
- How are passwords stored (e.g., hashed, salted)?
- Is there protection against password leaks?
Thank you