Security

Customer feedback often contains information about real people, and we treat it that way. This page explains, in plain language, the steps Cliantale takes to keep your data safe.

Security is an ongoing effort. We keep improving our practices as Cliantale grows, and we do our best to follow sensible, industry-standard approaches for a business of our size.

Built on established infrastructure

Cliantale runs on established cloud infrastructure providers, including Cloudflare, rather than on our own servers. These providers invest heavily in physical security, network protection and resilience, and they encrypt stored data.

Encryption

• In transit: our website and service use HTTPS, so information sent between your browser and Cliantale is encrypted.
• At rest: data is stored with providers that encrypt it on their systems.

Access to your data

• Only people who need access to provide and support the service can access customer data.
• We protect our own accounts and systems with strong authentication and limit permissions to what each person needs.
• Secrets such as API keys are stored in encrypted settings, not in our code.

How we treat your data

• We use your data only to provide Cliantale to you.
• We never use your data to train AI models, and we do not allow our AI providers to do so.
• We delete your data within 30 days after your subscription ends.
• We collect only what we need. For example, we store a scrambled (hashed) version of website visitors' IP addresses for spam protection, not the addresses themselves.

Protecting our website

Our website uses security headers, spam protection on our contact form, and rate limits to reduce abuse.

If something goes wrong

If we become aware of a security incident affecting your data, we will act quickly to contain it, investigate, and let affected customers know. Where a privacy breach is likely to cause serious harm, we will also notify the relevant regulators as required by New Zealand and Australian law.

Certifications

Cliantale does not currently hold formal security certifications such as SOC 2 or ISO 27001. We are happy to answer security questionnaires from customers. Please get in touch.

Your part

• Keep your login details private and use a strong, unique password.
• Only upload the information you need analysed.
• Tell us promptly if you notice anything unusual in your account.

Reporting a security concern

If you believe you have found a security vulnerability in Cliantale, please tell us using the contact form on our website at cliantale.com (select "Contact Now") and mention "Security" in your message. Please give us a reasonable chance to fix it before sharing it with anyone else. We appreciate responsible disclosure.