Security Policy

1. Introduction

At Beenokle ("we", "our", or "us"), we are committed to protecting the security of your information. This Security Policy outlines the measures we take to protect your data from unauthorized access, disclosure, alteration, and destruction.

We implement a variety of security measures to maintain the safety of your personal information and creative content when you use our services.

Note: This English version is provided for convenience only. In the event of any inconsistency or conflict, the Russian version shall prevail.

2. Data Protection Measures

2.1 Secure Data Transmission

We use Transport Layer Security (TLS/HTTPS) to encrypt data in transit between your device and our servers. This protects your information from eavesdropping and man-in-the-middle attacks during transfer.

2.2 Secure Data Storage

Your data is stored securely on our servers with industry-standard security measures. Our storage systems are protected by firewalls and access controls, and regularly audited for security compliance.

2.3 Access Controls

We implement strict access controls to ensure that only authorized personnel have access to our systems and infrastructure. We follow the principle of least privilege, granting access only to the specific resources needed to perform job functions.

2.4 Privacy Commitment

Privacy is our priority. We don't sell your data to third parties, don't show advertisements, and handle your information responsibly. We limit access to your data and use it only to provide and improve our services.

3. Authentication and Authorization

3.1 Strong Authentication

We enforce strong password policies and recommend that users enable two-factor authentication (2FA) where available. Our authentication systems are designed to prevent brute force attacks and credential stuffing.

3.2 Session Management

We implement secure session management practices, including secure session tokens, automatic session timeouts, and invalidation of sessions after password changes.

4. Infrastructure Security

4.1 Network Security

Our infrastructure is protected by firewalls, intrusion detection systems, and regular security scans. We monitor network traffic for unusual patterns that might indicate security threats.

4.2 Server Security

Our servers are regularly updated with security patches. We enforce strict security configurations and regularly audit our systems for potential vulnerabilities.

4.3 Security Testing

We conduct regular security testing, including vulnerability assessments and penetration testing, to identify and address potential security issues before they can be exploited.

5. Incident Response

We have a comprehensive incident response plan in place to identify, respond to, and mitigate the impact of security incidents. In the event of a data breach or security incident that affects your personal information, we will notify you in accordance with applicable laws and regulations.

6. Employee Security Awareness

All Beenokle employees undergo security awareness training to ensure they understand their responsibilities in protecting user data. We enforce strict policies regarding the handling of sensitive information.

7. Third-Party Security

We carefully select and monitor third-party service providers to ensure they maintain appropriate security measures. We require our partners to adhere to strict security standards when handling user data.

8. User Responsibilities

While we take extensive measures to protect your data, security is a shared responsibility. We recommend that you:

• Use strong, unique passwords for your Beenokle account
• Enable two-factor authentication if available
• Keep your device's operating system and software up to date
• Be cautious about phishing attempts and suspicious links
• Log out of your account when using shared or public computers

9. Security Certifications and Compliance

We strive to comply with industry security standards and best practices. Our security practices are designed to align with Russian Federal Law No. 152-FZ "On Personal Data", GDPR (General Data Protection Regulation), and other applicable data protection regulations.

10. Security Updates

We continuously review and update our security measures to address new threats and vulnerabilities. As security technologies and best practices evolve, we adapt our approaches to maintain the highest level of protection for your data.

11. Security Concerns or Vulnerabilities

If you identify a security vulnerability in our services or have concerns about our security practices, please contact us immediately at security@beenokle.ru. We take all security reports seriously and will investigate and address them promptly.

12. Changes to This Security Policy

We may update this Security Policy from time to time to reflect changes in our security practices or legal requirements. We will notify you of any significant changes by posting the new Security Policy on this page and updating the "Last Updated" date.

13. Contact Us

If you have any questions about this Security Policy, please contact us at security@beenokle.ru.