Security Policy

At GintiDesk, security is one of our highest priorities. We understand that our customers trust us with sensitive financial, accounting, and business information, and we are committed to protecting that information through strong security practices, responsible data handling, and continuous improvement.

This Security Policy describes the security measures adopted by GintiDesk Technologies, based at Shop No. 449, Wall Street Business Hub, Opp. Avadh Utopia, Surat, Gujarat - 394550, to safeguard customer data and maintain the reliability of our cloud-based accounting platform.

1. Our Commitment to Security

GintiDesk is committed to:

• Protecting customer information from unauthorized access, disclosure, alteration, and destruction.
• Maintaining the confidentiality, integrity, and availability of customer data.
• Implementing industry-standard security practices.
• Continuously improving our security controls and infrastructure.
• Monitoring and responding to emerging security threats.

Security is incorporated into our software development, infrastructure management, and operational processes.

2. Secure Cloud Infrastructure

GintiDesk is hosted on secure cloud infrastructure provided by Hostinger VPS.

Our hosting environment benefits from:

• Enterprise-grade physical security.
• Redundant infrastructure and networking.
• High availability architecture.
• Data center monitoring and surveillance.
• Network isolation and segmentation.
• Disaster recovery capabilities.
• DDoS protection and network security measures.

Infrastructure is managed using secure configurations designed to reduce operational and security risks.

3. Data Encryption

We use encryption technologies to help protect customer information.

Encryption in Transit

All communication between users and GintiDesk is encrypted using secure HTTPS protocols and industry-standard Transport Layer Security (TLS).

This helps protect information from interception while it travels across the internet.

Encryption at Rest

Sensitive information stored within our systems may be encrypted while stored on servers and databases.

Encryption at rest helps protect stored data against unauthorized access and reduces risks associated with physical or logical compromise.

4. User Authentication and Access Control

GintiDesk implements access control mechanisms designed to ensure that only authorized individuals can access data.

Security controls may include:

• Secure login procedures.
• Strong password requirements.
• Session management.
• Role-based user permissions.
• User activity monitoring.
• Access logging.
• Account lockout protections against suspicious login attempts.

Customers are responsible for protecting their login credentials and maintaining secure passwords.

5. Customer Data Protection

Customer data remains the property of the customer.

GintiDesk does not sell customer data or provide unauthorized access to third parties.

We process customer information solely for:

• Delivering services.
• Maintaining system functionality.
• Providing customer support.
• Improving platform performance.
• Meeting legal and regulatory obligations.

Access to customer data is restricted to authorized personnel only when required for legitimate operational purposes.

6. Application Security

Security is considered throughout the software development lifecycle.

Our development and deployment practices may include:

• Secure coding principles.
• Code reviews.
• Security testing.
• Vulnerability assessments.
• Dependency and library updates.
• Configuration reviews.
• Environment separation between development and production systems.

We regularly evaluate our systems to identify and address potential security risks.

7. Monitoring and Threat Detection

We continuously monitor our systems and infrastructure to identify unusual activities and potential threats.

Monitoring activities may include:

• System performance monitoring.
• Security event logging.
• Unauthorized access detection.
• Suspicious login activity monitoring.
• Error and exception tracking.
• Resource utilization monitoring.
• Network activity analysis.

When security issues are identified, we take appropriate actions to investigate and mitigate risks.

8. Backup and Disaster Recovery

GintiDesk maintains backup and recovery procedures designed to protect customer data against accidental loss and service interruptions.

Our practices may include:

• Automated data backups.
• Multiple backup copies.
• Secure backup storage.
• Recovery procedures and testing.
• Infrastructure redundancy.
• Business continuity planning.

While we strive to minimize data loss, customers are encouraged to maintain copies of critical business records where appropriate.

9. Incident Response

Despite strong security measures, no system can guarantee absolute protection.

If a security incident occurs, GintiDesk will take reasonable measures to:

• Investigate the incident promptly.
• Assess the nature and scope of the issue.
• Contain and mitigate risks.
• Restore affected services where applicable.
• Notify affected users when required by applicable laws.
• Implement corrective measures to prevent recurrence.

We continuously improve our security processes based on lessons learned from security incidents and emerging threats.

10. Employee and Internal Security

Access to customer information within GintiDesk is limited and controlled.

We implement internal safeguards including:

• Role-based access permissions.
• Restricted administrative access.
• Confidentiality obligations.
• Secure device practices.
• Access logging and monitoring.
• Periodic review of permissions.

Only authorized personnel with legitimate business requirements may access systems or customer information.

11. Third-Party Service Providers

GintiDesk may rely on trusted third-party providers for services such as:

• Cloud hosting.
• Email delivery.
• Payment processing.
• Analytics.
• SMS services.
• Monitoring and infrastructure tools.

We make reasonable efforts to work with providers that maintain appropriate security standards.

However, each third-party provider operates under its own policies and security practices.

12. Customer Security Responsibilities

Security is a shared responsibility.

Customers are encouraged to:

• Use strong and unique passwords.
• Restrict account access to authorized personnel.
• Keep devices and browsers updated.
• Review user permissions regularly.
• Protect login credentials.
• Log out from shared devices.
• Maintain backups of critical business records.
• Monitor account activity.
• Notify GintiDesk immediately if suspicious activity is detected.

Failure to follow good security practices may increase security risks beyond our control.

13. Vulnerability Reporting

We appreciate responsible disclosure of security vulnerabilities.

If you believe you have identified a security issue affecting GintiDesk, please report it responsibly by contacting:

Email: info@gintidesk.com

Phone: +91 93289 97710

Please include:

• Description of the issue.
• Steps to reproduce the vulnerability.
• Screenshots or supporting evidence, if available.
• Your contact details for follow-up.

We request that researchers:

• Avoid disrupting our services.
• Do not access customer information.
• Do not exploit vulnerabilities beyond what is necessary to demonstrate the issue.
• Allow us reasonable time to investigate and resolve the issue before public disclosure.

We value responsible security research and will review all legitimate reports seriously.

14. Compliance and Regulatory Considerations

GintiDesk is committed to operating in accordance with applicable laws and regulations related to:

• Data protection.
• Information security.
• Privacy.
• Financial data handling.
• Taxation and accounting requirements.

As our services evolve, we may adopt additional security controls, standards, and compliance frameworks to strengthen our security posture.

15. Limitations

While GintiDesk implements commercially reasonable security measures, no system, software, network, or internet transmission is completely secure.

Accordingly:

• We cannot guarantee absolute security.
• We cannot guarantee uninterrupted service availability.
• We cannot eliminate all cybersecurity risks.
• We cannot prevent every unauthorized act by third parties.

Users acknowledge these inherent limitations when using internet-based services.

16. Changes to This Security Policy

We may update this Security Policy periodically to reflect:

• Changes in technology.
• Infrastructure improvements.
• Security enhancements.
• Regulatory developments.
• Business and operational requirements.

Updated versions will be published on our website with a revised effective date.

Continued use of GintiDesk after such updates constitutes acceptance of the revised Security Policy.

17. Contact Us

If you have any questions regarding this Security Policy or wish to report a security concern, please contact:

GintiDesk Technologies

Shop No. 449, Wall Street Business Hub, Opp. Avadh Utopia, Surat, Gujarat - 394550

Website: gintidesk.com

Email: info@gintidesk.com

Phone: +91 93289 97710

At GintiDesk, we believe that trust is built on security. We continuously invest in technologies, processes, and best practices to help protect your business information and provide a secure and reliable cloud accounting experience.