🔐 Security at MySolvers

1. Data Minimization

We collect only the data necessary to operate our service:

• Email address and username for account creation and login
• No passwords are stored in plain text
• No payment data is stored—Stripe handles all billing securely

2. Authentication & Access Control

• Passwords are hashed using industry-standard algorithms (bcrypt)
• Session management is handled securely via HTTP-only cookies
• Admin access is strictly limited and audited
• Role-based access control (RBAC) is enforced where applicable

3. Encryption

• All data in transit is encrypted using TLS 1.2+
• Sensitive data at rest (e.g., user credentials) is encrypted or hashed
• Stripe handles payment data with PCI-DSS Level 1 compliance

4. Infrastructure Security

• Our service is deployed using containerized environments
• We monitor and patch dependencies regularly
• Network access is restricted via firewalls and private subnets
• Secrets and environment variables are stored securely

5. Monitoring & Incident Response

• We monitor uptime, error rates, and suspicious activity
• Automated alerts notify us of anomalies or potential breaches
• In case of a security incident, we follow a documented response plan including user notification and remediation

6. User-Controlled Data Deletion

Users can delete their account at any time. This action:

• Permanently removes all personal data from our database
• Ensures no residual data remains in backups beyond retention limits

7. Third-Party Services

We use trusted third-party providers:

• Stripe for secure payment processing
• Next.js Analytics for anonymized usage tracking
• All third-party services are vetted for security and compliance

8. Compliance

We align with key privacy and security standards:

• GDPR: Users can access, export, or delete their data
• PCI-DSS: Stripe handles all payment data in compliance
• Data localization: Our servers are hosted in Europe with appropriate safeguards

9. Responsible Disclosure

If you discover a vulnerability, we encourage responsible disclosure. Please contact us at support@mysolvers.com and we'll respond promptly.