Security Policy

Encryption in Transit — CleerCut uses secure communication protocols such as SSL/TLS to protect data transmitted between users and the platform. These protocols help ensure that sensitive information transmitted over the internet is protected from interception.

Secure Data Storage — CleerCut uses reasonable technical safeguards designed to protect stored data, which may include:

• Access controls limiting data access to authorized personnel
• Encryption or other protective measures where appropriate
• Secure infrastructure managed through trusted cloud providers

Data access is restricted based on the principle of least privilege.

Data Minimization — CleerCut collects and stores only the information necessary to operate the platform and provide services to users. Limiting the amount of stored personal information helps reduce security risks and supports user privacy.

Users are responsible for maintaining the security of their account credentials. Users are encouraged to:

• Create strong passwords
• Avoid reusing passwords across multiple services
• Keep login credentials confidential

CleerCut may offer optional two-factor authentication where available to provide additional account security. Accounts may be temporarily restricted after repeated failed login attempts to prevent unauthorized access attempts.

All payment processing on CleerCut is handled by a third party payment provider, currently Stripe. CleerCut does not store credit card or bank account information on its servers. Sensitive payment data is processed and stored by the payment provider using industry standard security practices including tokenization and PCI compliant infrastructure.

CleerCut maintains security monitoring and logging mechanisms designed to detect unusual activity and potential threats to the platform. In the event of a security incident, CleerCut may take actions including:

• Investigating and containing the issue
• Restoring affected systems
• Notifying affected users when appropriate and where required by applicable law

CleerCut works to resolve security incidents as quickly as reasonably possible.

CleerCut relies on certain third party services to operate the platform, including:

• Payment processing providers
• Cloud hosting infrastructure
• Analytics or security tools

These providers may process limited user data as necessary to perform their services. CleerCut selects vendors that maintain reasonable security standards but cannot guarantee the independent practices of third party services.

Users play an important role in maintaining platform security. Users are responsible for:

• Maintaining the confidentiality of their account credentials
• Using secure devices and updated software
• Reporting suspicious account activity to hello@cleercut.com

Failure to maintain account security may result in unauthorized activity that CleerCut cannot fully prevent.

CleerCut may update this Security Policy as the platform evolves and security practices improve. Updates will be reflected by the last updated date at the top of this document.