Encryption in transit and at rest
Traffic is protected with TLS, and sensitive stored data uses encryption controls.
Security and privacy are ongoing operating responsibilities. This page explains the safeguards and reporting channels GoodOff publishes today.
Safeguards span transport, storage, authentication, account boundaries, infrastructure, and sharing controls.
Traffic is protected with TLS, and sensitive stored data uses encryption controls.
Passwords are hashed rather than stored as plain text, and supported OAuth methods provide another sign-in path.
Database authorization policies help separate account content and restrict access to supported service workflows.
GoodOff uses managed service providers and operating controls for application hosting and data services.
The product is intended to collect the data needed to provide and improve the service, subject to the published privacy policy.
Permissions govern access to study materials a user chooses to share through supported product features.
These statements describe intended data-handling practices. They are not third-party certifications unless explicitly stated.
Published controls include data access and account deletion workflows for supported requests.
GoodOff publishes privacy rights and request channels for applicable users.
GoodOff is intended for users aged 13 and older; separately designated community areas may have higher age requirements.
Operational safeguards require monitoring, review, patching, backups, and a clear response process.
Core controls described for the service today.
Security researchers and users can report a potential vulnerability through the published contact channels.
Email the security contacts with enough detail to reproduce and assess the issue.
Ibrahim@goodoff.co · sana@goodoff.co
Use the contact page for questions about published safeguards or privacy practices.