Security

1. Data Protection

GEOsync uses secure connections to protect information transmitted between your browser and our Services.

We limit the collection of personal information to what is reasonably necessary to provide accounts, webpage scans, reports, EchoTune™ recommendations, payments, support, and related functionality.

Users should not submit passwords, confidential information, regulated data, or other sensitive content as part of a webpage scan.

2. Account Security

GEOsync uses authenticated accounts to control access to account-specific features, purchased credits, and saved reports.

Users are responsible for:

• Creating a strong and unique password.
• Keeping login credentials confidential.
• Avoiding the sharing or transfer of accounts.
• Signing out of accounts used on shared devices.
• Promptly notifying GEOsync of suspected unauthorized access.

GEOsync may restrict or suspend access when suspicious, abusive, or unauthorized activity is detected.

3. Webpage Scan Security

GEOsync analyzes publicly accessible webpage content and technical signals submitted through URL scans.

Protective measures are used to reduce the risk of scans being used to access restricted, private, local, or internal network resources. GEOsync may reject URLs, redirects, hosts, or requests that appear unsafe, unsupported, unauthorized, or inconsistent with the intended purpose of the Services.

Users may submit only websites and content they are authorized to analyze.

4. Access Controls

GEOsync uses access controls intended to limit account information, reports, credits, and administrative functions to authorized users and systems.

We apply authorization checks to sensitive operations and seek to limit internal and service-provider access according to operational need.

No user should attempt to bypass authentication, access another user's information, manipulate credits, or interfere with platform controls.

5. Payment Security

Payments for prepaid scan credits are processed by a third-party payment provider. GEOsync does not directly store complete payment-card numbers.

Payment information is handled by the payment provider under its own security, privacy, and compliance practices. GEOsync receives limited transaction information needed to confirm purchases, allocate credits, maintain records, prevent fraud, and provide support.

6. Service Providers

GEOsync relies on third-party providers for functions such as infrastructure, authentication, payments, communications, analytics, security, and artificial-intelligence processing.

We seek to limit the information shared with these providers to what is reasonably necessary for them to perform their services. Third-party providers maintain their own security programs, policies, and legal obligations.

7. Secure Development and Monitoring

GEOsync's security practices may include:

• Reviewing sensitive application and database access paths.
• Restricting privileged operations.
• Validating user input and webpage-scan requests.
• Applying security updates and dependency maintenance.
• Reviewing identified vulnerabilities and implementing appropriate remediation.
• Monitoring for operational failures, misuse, and suspicious activity.
• Maintaining backups or recovery capabilities where appropriate.

Security practices may evolve as the Services, technology, and threat environment change.

8. Incident Response

If GEOsync becomes aware of a security incident affecting user information, we will investigate and take reasonable steps to contain and address the issue.

Where required by applicable law, we will notify affected users or appropriate authorities.

9. Your Responsibilities

Security is a shared responsibility. You can help protect your account and information by:

• Using a strong, unique password.
• Protecting access to your email account and devices.
• Reviewing URLs before submitting them for analysis.
• Avoiding the submission of confidential or sensitive information.
• Reporting unexpected account activity promptly.
• Keeping your browser and operating system current.

10. Responsible Disclosure

If you believe you have discovered a security vulnerability involving GEOsync, please report it privately and provide enough detail for us to investigate.

Do not publicly disclose a suspected vulnerability, access another user's information, disrupt the Services, perform destructive testing, or use automated testing that could impair platform availability.

We will review good-faith reports and respond as appropriate. Submission of a report does not create any entitlement to payment or participation in a bug-bounty program.

11. Security Limitations

No website, application, transmission method, or storage system can be guaranteed to be completely secure.

GEOsync does not claim that the Services are immune from every threat, and this page does not constitute a warranty, certification, audit report, or representation of compliance with a particular security framework.

12. Contact Us

To report a suspected security issue or ask a security-related question, contact: