At SnackMagic, protecting your data is our top priority.

This article covers our robust data protection practices. Whether you’re a sender or recipient, find answers to common questions about how SnackMagic safeguards sensitive data and prioritizes your trust.

How SnackMagic Protects Your Data

HTTPS Protocol for Secure Communication:

• All communications between your browser and our servers are protected by HTTPS, ensuring your data is encrypted during transmission.

Secure Password Management:

• User passwords are never stored in plain text. We use one-way hashing encryption, which means passwords cannot be retrieved, only reset.
  
  

Credit Card Numbers:

• Your credit card numbers are never stored on our servers. They are stored at secure vault servers on Stripe. We only have the last 4 digits of the card. Stripe has been audited by a PCI-certified auditor and is Certified to PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry.
  
  

Masked Data Passing:

• Sensitive information passing through our servers is masked to prevent it from being logged or accessible.

Virtual Private Cloud (VPC) Protection:

• Our infrastructure is hosted within a VPC on Amazon Web Services (AWS), ensuring restricted and secure access to servers.

Advanced Development Practices:

• Our development team adheres to best practices to prevent vulnerabilities like cross-site scripting (XSS) and SQL injection attacks.

Employee Access Controls:

• We manage employee permissions. Employees have access only to the information necessary for their job roles. All-access actions are logged, with an audit trail maintained for accountability.

Regular Password Rotation:

• To enhance security, all employee passwords are regularly rotated to minimize risks.