Data Security Policy

Bevywise is committed to ensuring the security of your data. This Data Security Policy outlines the measures we take to protect your information we collect via our Crystal MQ service and the responsibilities of our team and users in maintaining data security.

Data Protection Measures

• Encryption: All data transmitted to and from our servers is encrypted using industry-standard encryption protocols (e.g., TLS/SSL). Sensitive data stored on our servers is encrypted at rest using advanced encryption standards (e.g., AES-256).
• Access Controls: Access to data is restricted to authorized personnel only, based on their job responsibilities. Regular audits of access logs are conducted to ensure compliance and detect any unauthorized access.
• Network Security: Firewalls and intrusion detection/prevention systems (IDS/IPS) are deployed to protect our network perimeter. Regular vulnerability assessments and penetration testing are conducted to identify and address security weaknesses. Secure VPNs are used for remote access to internal systems.
• Data Backup and Recovery: Regular backups of all critical data are performed and stored securely. Backup data is encrypted and stored in geographically separate locations. Disaster recovery plans are in place to ensure data availability and integrity in case of a major incident.

Employee Responsibilities

• Training and Awareness: All employees receive regular training on data security best practices and are made aware of their responsibilities in protecting data. Employees are required to follow the company's data security policies and procedures at all times.
• Confidentiality Agreements: Employees must sign confidentiality agreements as a condition of employment. Any breach of confidentiality may result in disciplinary action, up to and including termination.

User Responsibilities

• Account Security: Users are responsible for maintaining the confidentiality of their account credentials. Users should use strong, unique passwords for their service account. Any suspected compromise of account credentials should be reported to Bevywise immediately.
• Data Handling: Users should ensure that any data they upload to Crystal MQ is done securely and in compliance with applicable laws and regulations. Users should not share sensitive data with unauthorized individuals.

Incident Response

• Incident Detection and Reporting: Bevywise has procedures in place for detecting and responding to security incidents. Any suspected security incident should be reported immediately to our security team at support@crystalMQ.com.
• Investigation and Mitigation: All reported incidents will be promptly investigated. Appropriate measures will be taken to mitigate any risks and prevent future incidents.

Compliance and Review

• Legal and Regulatory Compliance: Crystal MQ complies with all applicable data protection laws and regulations, including GDPR and CCPA. Regular audits are conducted to ensure compliance with these laws and our own security policies.
• Policy Review: This Data Security Policy is reviewed and updated regularly to reflect changes in technology, threats, and legal requirements. Users will be notified of any significant changes to this policy.

Contact Information

For any questions or concerns regarding this Data Security Policy, please contact us at:
Email: support@crystalmq.com