Security Policy
Last updated: February 28, 2025
At Vyapar Drishti (operated by Pixel PropX Solutions), security is our top priority. We employ industry-leading practices to ensure your data remains safe, private, and accessible only to authorized parties. This document outlines our security measures and commitment to protecting your information.
Data Encryption
-
All data transmitted between your device and our servers is encrypted using TLS 1.3 protocol with strong ciphers.
-
Data at rest is encrypted using AES-256 industry standard encryption.
-
We implement perfect forward secrecy to ensure that encrypted sessions cannot be decrypted even if the server key is compromised.
Authentication & Access
-
We support multi-factor authentication (MFA) for all user accounts and strongly encourage its use.
-
Access to our systems is strictly controlled through role-based access control (RBAC).
-
Failed login attempts are monitored, with automatic account locking after multiple failures to prevent brute force attacks.
-
All authentication tokens are securely hashed and have configurable expiration times.
Infrastructure Security
-
Our infrastructure is hosted in SOC 2 Type II and ISO 27001 certified data centers.
-
We employ network segmentation, firewalls, and intrusion detection/prevention systems.
-
Regular vulnerability scans and penetration tests are conducted by independent third parties.
-
Security patches are applied promptly following a rigorous testing and deployment procedure.
Monitoring & Incident Response
-
24/7 security monitoring of all systems and networks.
-
Automated alerting for suspicious activities and potential security incidents.
-
Comprehensive incident response plan with defined roles and procedures.
-
Regular security drills and tabletop exercises to ensure our team is prepared to respond effectively.
Certifications & Compliance
Security FAQ
How do you protect my personal information?
Your personal information is protected through a combination of encryption, access controls, and secure development practices. We only collect the minimum information necessary, store it securely with encryption, and strictly limit access to authorized personnel.
Do you share my data with third parties?
We only share your data with third parties when necessary to provide our services, and only with providers who maintain similarly strict security standards. All third-party providers are carefully vetted and bound by data processing agreements.
What should I do if I discover a security vulnerability?
If you believe you've found a security vulnerability, please contact our engineering team immediately at info@pixelpropx.in. We have a responsible disclosure policy and appreciate the security community's efforts to help us maintain a secure platform.
How can I make my account more secure?
We recommend enabling multi-factor authentication, using a unique and strong password, regularly reviewing your account activity, and keeping your devices and software up to date.
Report a Security Issue
If you discover a potential security issue, please contact us immediately at security@example.com. We take all security concerns seriously and will respond promptly.