Security & Data Protection

How we keep your personal information and practice data secure

Your Security is Our Priority

We understand that using tools for social anxiety requires deep trust. Your personal information, practice data, and voice recordings are protected with enterprise-grade security measures.

Encryption in Transit & at Rest

  • All data encrypted in transit using TLS 1.3
  • Data encrypted at rest using AES-256
  • Database encryption with rotating keys
  • Secure password hashing with bcrypt

Voice Data Privacy

  • Voice processed in real-time only
  • No permanent audio storage
  • Immediate deletion after processing
  • Local processing when possible

Access Controls

  • Role-based access for our team
  • Regular access reviews and audits
  • Secure password requirements

Infrastructure Security

  • Hosted on SOC 2 certified platforms
  • Network firewalls and DDoS protection
  • Regular security updates and patches
  • 24/7 monitoring and alerting

Data Handling Principles

Data Minimization

We only collect data that's essential for providing our service. We don't collect unnecessary personal information or track your behavior outside our platform.

Purpose Limitation

Data is only used for the specific purposes you've agreed to. We don't sell, rent, or share your data for marketing or other purposes.

Retention Limits

Data is automatically deleted when it's no longer needed. Account data is purged 90 days after deletion. Voice data is never stored permanently.

Our Security Team & Practices

Regular Security Audits

  • Quarterly security assessments
  • Automated vulnerability scanning
  • Third-party penetration testing
  • Code security reviews

Incident Response

  • 24/7 security monitoring
  • Automated threat detection
  • Rapid incident response team
  • Transparent breach notification

Your Security Controls

Account Security Tips

Strong Passwords

  • • Use at least 10 characters
  • • Include numbers and symbols
  • • Use a unique password
  • • Consider a password manager

Account Monitoring

  • • Log out from public devices
  • • Report suspicious activity

Security Monitoring

Enhanced Monitoring: We monitor system activity closely to identify and fix security issues quickly.

  • All security standards meet or exceed industry requirements
  • Additional logging helps us improve security continuously
  • Users receive priority notification of security updates
  • Feedback on security concerns is actively monitored and addressed

Compliance & Standards

GDPR

European privacy regulation compliance

CCPA

California privacy rights protection

SOC 2

Service organization security standards

Report Security Issues

We take security concerns seriously. If you discover a potential security vulnerability, please report it responsibly:

For Security Issues:

Email: security@socialanxietyhelper.app
Subject: Security Vulnerability Report
Response: Within 24 hours

For General Security Questions:

Email: support@socialanxietyhelper.app
Subject: Security Question
Response: Within 48 hours

Responsible Disclosure: Please allow us to investigate and patch security issues before public disclosure. We're committed to acknowledging and fixing legitimate security concerns promptly.