Data Processing & Security
GoCollab is built with privacy and compliance in mind. Here's how we handle and protect data.
Encryption
All data is encrypted in transit with TLS 1.3 and at rest with AES-256. Encryption keys are rotated quarterly.
Limited access
Only authorized engineers can access production systems, with mandatory MFA, audit logging, and role-based permissions.
Safe data handling
Personally identifiable information is segmented, anonymized for analytics, and never shared with third parties without explicit permission.
API permissions
We only request the minimum Meta Graph API scopes required to operate your automations. You can revoke access at any time.
Account security
Strong password requirements, optional 2FA, anomalous-login detection, and automatic session expiry.
Compliance
We follow SOC 2 Type II, GDPR, and CCPA best practices. Annual third-party security audits and quarterly penetration tests.
For any questions about this document, email privacy@gocollab.app.