Security Policy

Data Protection

We use Google Firebase and Google Cloud Platform with advanced security protocols to protect user data. All sensitive information is encrypted at rest and in transit using industry-standard encryption methods.

Authentication

We utilize Google Authentication for secure user login, implementing multi-factor authentication and OAuth 2.0 protocols to prevent unauthorized access.

• Secure login via Google accounts
• OAuth 2.0 authentication
• Multi-factor authentication options
• Continuous session monitoring

Data Encryption

All user data is encrypted using AES-256 encryption, ensuring maximum protection of personal and transactional information.

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular encryption key rotation
• Secure key management practices

Access Controls

We implement strict role-based access controls to limit system access and protect user information.

• Principle of least privilege
• Granular user and admin role permissions
• Comprehensive access logging
• Real-time access monitoring

Compliance

Return HERO adheres to GDPR, CCPA, and other data protection regulations, ensuring comprehensive user data rights and protection.