Security
How we protect your data
Security isn't an afterthought — it's built into everything we do. Here's how we keep your data safe.
Encryption
All data transmitted between your browser and our servers is encrypted using HTTPS (TLS 1.2+). This protects your information from interception during transit. Data stored in our database is encrypted at rest using industry-standard encryption provided by our infrastructure provider.
Password Security
We never store your password in plaintext. Every password is hashed using bcrypt with 12 rounds of salting before it ever touches our database. Even in the unlikely event of a database breach, your actual password cannot be recovered.
Data Storage
Your data is isolated to your account and not shared with other users. We perform regular automated backups to prevent data loss and maintain service continuity. Backups are encrypted and stored securely.
Email Security
Outbound emails are sent through Amazon Web Services Simple Email Service (AWS SES), a verified and trusted email delivery platform. Email sending domains are verified with SPF and DKIM records to prevent spoofing.
Account Protection
Email verification is required before your account becomes fully active, ensuring that only you can claim your account. You can delete your account and all associated data at any time through a secure, confirmed deletion process.
Have a security concern?
If you discover a security vulnerability or have concerns about your data, please email us directly at support@gavrilo.web.id. We take all reports seriously.