Security Policy

1. Our Commitment to Security

We are committed to maintaining appropriate security practices based on the nature of the information we process and the services we provide.

Our security practices may include administrative, technical, and organizational measures designed to reduce security risks and protect information.

2. Data Protection Measures

Depending on the service and technical environment, we may implement appropriate security measures such as:

• Access controls
• Authentication mechanisms
• Secure communication protocols
• Data protection measures
• System monitoring
• Security updates and patches
• Backup and recovery procedures
• Vulnerability management
• Restricted access to sensitive information
• Appropriate security configurations

The specific controls used may vary depending on the system, service, technology, and project requirements.

3. Secure Communication

Where appropriate, our website and online services may use encryption technologies such as HTTPS/TLS to help protect information transmitted between your browser and our website.

Users should ensure that they are accessing our legitimate website and should avoid sharing sensitive credentials through unsecured communication channels.

4. Access Control

Access to systems and information is restricted based on business requirements and authorized responsibilities.

Where appropriate, access may be limited to authorized personnel who require such access to perform their duties.

We may use authentication, authorization, and other access-control mechanisms to reduce the risk of unauthorized access.

5. Employee and Personnel Security

We seek to ensure that personnel with access to business or client information understand their responsibilities regarding confidentiality and information security.

Access to information is provided based on applicable business requirements and may be removed or modified when no longer required.

6. Third-Party Services

Our website and services may rely on third-party providers, including hosting providers, cloud platforms, analytics services, payment providers, communication platforms, development tools, and other technology services.

We seek to work with reputable service providers and may evaluate their security and reliability where appropriate.

However, no third-party service can be guaranteed to be completely secure, and third-party providers remain responsible for the security of their own systems according to their applicable policies and agreements.

7. Data Retention

We retain information only for as long as reasonably necessary for the purposes for which it was collected, to provide services, maintain business records, comply with contractual obligations, resolve disputes, enforce agreements, or meet applicable legal requirements.

Retention periods may vary depending on the type and purpose of the information.

8. Security Monitoring and Incident Response

We may monitor our systems and services for suspicious activity, technical issues, unauthorized access attempts, and other security concerns.

If we become aware of a security incident that requires notification under applicable law or contractual obligations, we will take appropriate steps to investigate, contain, and address the incident and provide notifications where required.

9. Client Responsibilities

Security is a shared responsibility.

Clients and users are encouraged to:

• Use strong and unique passwords.
• Keep account credentials confidential.
• Enable multi-factor authentication where available.
• Keep software and devices updated.
• Avoid sharing sensitive credentials through insecure channels.
• Verify links and communications before providing information.
• Notify us promptly if they suspect unauthorized access or security issues.

Meritorious CodeCrafters is not responsible for security incidents resulting from a user's failure to maintain the security of their own accounts, devices, credentials, or systems.

10. Vulnerability Reporting

If you believe you have identified a security vulnerability affecting our website, services, or systems, we encourage you to report it responsibly.

Please provide sufficient information to help us understand and investigate the issue, including:

• Description of the suspected vulnerability
• Affected website, service, or feature
• Steps required to reproduce the issue, where applicable
• Relevant screenshots or technical details, where appropriate

Please do not attempt to access, modify, delete, or disclose another person's data or information while investigating a suspected vulnerability.

Security reports can be submitted to:

Email: business@meritorious.global

Phone: +91 95108 35629

11. No Absolute Guarantee

Although we take reasonable measures to protect information and systems, no website, network, application, electronic transmission, or storage system can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security or that our systems will never experience unauthorized access, attacks, vulnerabilities, or other security incidents.

12. Changes to This Security Policy

We may update this Security Policy periodically to reflect changes to our security practices, technologies, services, or applicable requirements.

Any updates will be published on this page with a revised effective date above.

13. Contact Us

If you have questions, concerns, or security-related inquiries, please contact:

Company Name: Meritorious CodeCrafters Private Limited

Address: D 412, Vrundavan Trade Centre (VTC), Nr Reliance Cross Road, Kudasan - 382421, Gandhinagar, Gujarat, India.

Phone: +91 95108 35629

Email: business@meritorious.global