Introduction
YIMBY is committed to ensuring the security and privacy of our users. This Security Policy outlines the measures we have in place to protect our website, data, and users from potential threats.
Data Protection
- Encryption: All sensitive data, including personal information and financial transactions, is encrypted using TLS (Transport Layer Security) to prevent unauthorized access during transmission.
- Data Storage: Sensitive data is stored in secure, encrypted databases with restricted access.
Access Control
- Authentication: Access to the website’s backend and administrative interfaces requires strong, multi-factor authentication (MFA).
- Authorization: User permissions are managed based on roles, with the principle of least privilege applied to minimize access rights.
Network Security
- Firewalls: Firewalls are deployed to protect against unauthorized access and attacks.
- Intrusion Detection and Prevention: Systems are in place to monitor for and respond to suspicious activity in real-time.
- Regular Security Audits: Network and system security is reviewed and tested regularly to identify and address vulnerabilities.
Application Security
- Secure Coding Practices: Development follows secure coding guidelines to minimize vulnerabilities.
- Regular Updates: Software and systems are kept up to date with the latest security patches and updates.
- Vulnerability Scanning: Regular scans are conducted to identify and mitigate potential security issues.
User Privacy
- Data Collection: We collect only the data necessary for providing our services and do so transparently.
- Data Usage: User data is used solely for the purposes outlined in our Privacy Policy.
- Third-Party Sharing: We do not share user data with third parties without explicit consent, except where required by law.
Incident Response
- Incident Management: We have an incident response plan in place to quickly address and mitigate security breaches.
- Notification: Users will be notified promptly in the event of a significant security incident affecting their data.
Compliance
- Legal and Regulatory Compliance: YIMBY complies with all relevant data protection regulations and industry standards.
- Policy Review: This security policy is reviewed and updated regularly to ensure continued compliance and effectiveness.
User Responsibilities
- Password Management: Users are encouraged to use strong, unique passwords and to change them regularly.
- Phishing Awareness: Users should be aware of phishing attempts and report any suspicious communications.