Security Policy
Last updated: January 17, 2026
Calivoren is committed to maintaining the security, integrity, and confidentiality of information processed through calivoren.com. This Security Policy describes the technical and organizational measures we apply to protect our systems and the data entrusted to us by users of our platform.
By using our services, you acknowledge that you have read and understood this policy. We encourage you to review it periodically, as it may be updated to reflect changes in our practices or applicable standards.
1. Scope
This policy applies to all systems, applications, infrastructure, and personnel associated with the operation of calivoren.com and any services delivered under the Calivoren name. It covers data at rest, data in transit, and data processed during the normal operation of our platform.
2. Information We Protect
We apply security controls to protect the following categories of information:
- Account credentials and authentication data
- Personal information submitted through registration or contact forms
- Usage data and activity logs generated during platform interactions
- Payment-related data processed through third-party payment providers
- Communications sent to or received from our support channels
3. Technical Security Measures
3.1 Data Encryption
All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS). We enforce modern cipher suites and disable deprecated protocol versions. Sensitive data stored in our systems is encrypted at rest using industry-standard encryption algorithms.
3.2 Access Controls
Access to internal systems and user data is restricted on a need-to-know basis. We apply role-based access controls to limit the scope of permissions granted to personnel and automated systems. Privileged access requires additional authentication steps and is subject to regular review.
3.3 Authentication
User accounts are protected through secure password hashing using modern one-way algorithms. We support and encourage the use of multi-factor authentication where available. Session tokens are generated using cryptographically secure methods and are invalidated upon logout or after periods of inactivity.
3.4 Network Security
Our infrastructure is protected by firewalls, intrusion detection systems, and network segmentation controls. Public-facing services are isolated from internal administrative systems. We apply rate limiting and traffic filtering to mitigate automated abuse and denial-of-service attempts.
3.5 Vulnerability Management
We conduct regular security assessments of our platform, including vulnerability scanning and code reviews. Software dependencies are monitored for known vulnerabilities and updated promptly when patches are available. Critical security issues are prioritized and addressed within defined response timeframes.
3.6 Logging and Monitoring
System activity is logged and monitored continuously. Logs are retained for a defined period and reviewed for indicators of unauthorized access, anomalous behavior, or policy violations. Alerts are configured to notify our team of events that may indicate a security incident.
4. Organizational Security Measures
4.1 Personnel Responsibilities
All individuals with access to our systems are required to adhere to internal security guidelines. Access privileges are granted based on role requirements and are revoked promptly upon a change in responsibilities or departure from the organization.
4.2 Security Awareness
Personnel involved in the operation of our platform are made aware of security practices relevant to their roles. This includes guidance on handling sensitive information, recognizing phishing attempts, and following secure development practices.
4.3 Third-Party Providers
We work with third-party service providers for functions such as hosting, payment processing, and analytics. We evaluate the security practices of these providers before engagement and require that they maintain appropriate standards for protecting any data shared with them. We do not sell user data to third parties.
4.4 Data Minimization
We collect and retain only the information necessary to provide and improve our services. Data that is no longer required for operational or legal purposes is securely deleted or anonymized in accordance with our data retention practices.
5. Incident Response
We maintain an incident response process to address security events in a timely and organized manner. In the event of a confirmed security incident that affects user data, we will:
- Contain and investigate the incident as quickly as practicable
- Assess the scope and nature of any data affected
- Notify affected users where required and where contact information is available
- Take corrective action to prevent recurrence
- Document the incident and our response for internal review
The timeline and method of notification will depend on the nature of the incident and the information available at the time of discovery.
6. User Responsibilities
Security is a shared responsibility. Users of our platform are expected to take reasonable steps to protect their own accounts and data, including:
- Choosing strong, unique passwords and not reusing credentials across services
- Enabling multi-factor authentication where offered
- Keeping login credentials confidential and not sharing account access
- Logging out of sessions on shared or public devices
- Reporting any suspected unauthorized access or suspicious activity promptly
We are not responsible for security incidents that result from a user's failure to follow reasonable precautions.
7. Reporting a Security Concern
If you believe you have discovered a vulnerability, security issue, or unauthorized activity related to our platform, we encourage responsible disclosure. Please contact us directly so we can investigate and respond appropriately.
You can reach our team at: help@calivoren.com
Please include as much detail as possible in your report, including the nature of the issue, steps to reproduce it if applicable, and any supporting information. We will acknowledge receipt of your report and keep you informed of our investigation where appropriate.
We ask that you do not publicly disclose potential vulnerabilities before we have had a reasonable opportunity to investigate and address them.
8. Data Backup and Recovery
We maintain regular backups of critical system data to support continuity of service in the event of data loss, system failure, or a security incident. Backups are stored securely and tested periodically to verify that recovery procedures function as intended. Backup access is restricted to authorized personnel only.
9. Physical Security
Our platform is hosted on infrastructure provided by third-party cloud and hosting providers who maintain physical security controls over their data centers. These controls typically include restricted physical access, environmental monitoring, and redundant power and connectivity systems. We rely on our hosting providers to maintain these standards and select providers accordingly.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to support the operation of our platform, including session management and basic analytics. These technologies do not store sensitive personal information in unprotected form. For detailed information about how we use cookies, please refer to our Cookie Policy.
11. Changes to This Policy
We may update this Security Policy from time to time to reflect changes in our practices, technologies, or applicable standards. When we make material changes, we will update the date shown at the top of this page. We encourage you to review this policy periodically. Continued use of our platform following an update constitutes your acceptance of the revised policy.
12. Contact
If you have questions about this Security Policy or our security practices, please contact us:
Calivoren
calivoren.com
help@calivoren.com