At Snackmagic, protecting your data is our top priority.

This article covers our robust data protection practices. Whether you’re a sender or recipient, find answers to common questions about how Snackmagic safeguards sensitive data and prioritizes your trust.

How Snackmagic Protects Your Data

HTTPS Protocol for Secure Communication:

All communications between your browser and our servers are protected by HTTPS, ensuring your data is encrypted during transmission.

Secure Password Management:

User passwords are never stored in plain text. We use one-way hashing encryption, which means passwords cannot be retrieved, only reset.

Credit Card Numbers:

Your credit card numbers are never stored on our servers. They are stored at secure vault servers on Stripe. We only have the last 4 digits of the card. Stripe has been audited by a PCI-certified auditor and is Certified to PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry.

Masked Data Passing:

Sensitive information passing through our servers is masked to prevent it from being logged or accessible.

Virtual Private Cloud (VPC) Protection:

Our infrastructure is hosted within a VPC on Amazon Web Services (AWS), ensuring restricted and secure access to servers.

Advanced Development Practices:

Our development team adheres to best practices to prevent vulnerabilities like cross-site scripting (XSS) and SQL injection attacks.

Employee Access Controls:

We manage employee permissions. Employees have access only to the information necessary for their job roles. All-access actions are logged, with an audit trail maintained for accountability.

Regular Password Rotation:

To enhance security, all employee passwords are regularly rotated to minimize risks.

For more details, we encourage you to review our comprehensive 🔒Privacy Policy of our security measures. Your trust is of the utmost importance to us.