Security — ProfitFly

Overview

Security is foundational to how we build and operate ProfitFly. As a profit-analytics platform we process store, order and ads data on behalf of our customers, and we apply layered technical and organizational measures to keep that data confidential, available and intact. This page summarizes our program; the contractual commitments are set out in our Data Processing Agreement.

Security measures

Key controls that protect the Service and your data include:

Encryption

All traffic is encrypted in transit with TLS, and personal and customer data are encrypted at rest.

Infrastructure & hosting

We run on reputable cloud infrastructure with network isolation, firewalls and managed, regularly patched services.

Access control & least privilege

Role-based access with least-privilege defaults, unique accounts and strong authentication for personnel.

Secure development

A secure development lifecycle with code review, dependency scanning and controlled, auditable change management.

Monitoring & logging

Audit logging, security monitoring and alerting help us detect and respond to anomalous or suspicious activity.

Data segregation

Customer workspaces are logically segregated so that each customer can only access its own data.

Backups & continuity

Regular backups, redundancy and disaster-recovery procedures support availability and resilience.

Sub-processor diligence

We vet sub-processors and bind them to data-protection and security commitments before granting access.

Compliance

Our practices are designed to support compliance with the EU General Data Protection Regulation (GDPR), Spanish data-protection law and the California Consumer Privacy Act (CCPA/CPRA). We process personal data in line with our Privacy Policy and offer a Data Processing Agreement with Standard Contractual Clauses for international transfers.

Data protection by design and default— data minimization and pseudonymization where feasible.
Vendor governance— diligence and contractual safeguards for every sub-processor.
Continuous improvement— regular review and testing of our controls.

Responsible disclosure

We welcome reports from security researchers. If you believe you have found a security vulnerability in ProfitFly, please report it responsibly to support@mirandanetwork.es. Please give us a reasonable opportunity to investigate and remediate before any public disclosure, and avoid accessing or modifying data that is not yours, degrading the Service, or violating any law. We will acknowledge legitimate reports and keep you informed of our progress.

Report security issues to support@mirandanetwork.es