Purpose
Ocktova is committed to protecting the confidentiality, integrity, and availability of company, client, customer, and user information handled through our websites, databases, SaaS products, applications, and other technology services.
This policy explains how Ocktova protects the confidentiality, integrity, and availability of company, client, customer, and user information handled through our websites, databases, SaaS products, applications, and other technology services.
Ocktova is committed to protecting the confidentiality, integrity, and availability of company, client, customer, and user information handled through our websites, databases, SaaS products, applications, and other technology services.
Ocktova will collect, access, process, store, and manage data only for legitimate business, service, operational, or legal purposes. Sensitive and confidential information will be protected against unauthorized access, use, modification, disclosure, loss, or destruction.
Access to company systems, databases, source code, client information, and other sensitive resources will be provided only to authorized individuals based on their responsibilities. Access will be reviewed and removed when it is no longer required.
Ocktova will implement reasonable security measures, including secure authentication, strong passwords, access controls, system monitoring, backups, and appropriate security practices. Passwords, API keys, database credentials, tokens, and other access credentials must never be improperly shared or exposed.
Employees, founders, contractors, interns, and authorized third parties must maintain the confidentiality of company and client information. Confidential information may only be used for authorized purposes and must not be disclosed without proper authorization.
Client and customer data will be handled according to the agreed scope of services, contractual obligations, and applicable laws. Ocktova will not intentionally sell or disclose client data to unauthorized parties.
Third-party service providers, hosting providers, software providers, or other partners may receive limited access to information when reasonably required to deliver or maintain services. Such access should be appropriately authorized and protected.
Important business and client data should be backed up using appropriate procedures. Ocktova will take reasonable measures to restore critical systems and data following technical failures, accidental loss, or security incidents.
Any suspected unauthorized access, data breach, loss of information, credential compromise, or other security incident must be reported to Ocktova management as soon as reasonably possible. Ocktova will investigate and take appropriate corrective measures.
Information will be retained only for as long as reasonably necessary for business, contractual, operational, security, or legal purposes. When no longer required, information may be securely deleted or disposed of in accordance with applicable requirements.
Everyone with access to Ocktova systems or information is responsible for following security procedures, protecting credentials, using systems appropriately, and reporting suspected security issues.
Ocktova will operate in accordance with applicable laws, regulations, and contractual requirements relating to data and information security. This policy may be reviewed and updated periodically to reflect changes in technology, business operations, security practices, and legal requirements.