Security

Infrastructure

Delightree is hosted on Amazon Web Services (AWS). Customer data is stored behind secured networks and is only accessible by a limited number of people with special access rights, who are required to keep the information confidential.

Encryption

Data in transit is encrypted using SSL/TLS. Sensitive information you supply is encrypted in transit between your device and our servers.

Payments

We never ask for or store credit card numbers. All payment transactions are processed by Stripe, one of the largest payment processors in the world, and are not stored or processed on our servers.

Monitoring and testing

Our website and services are scanned on a regular basis for security holes and known vulnerabilities.

Availability

Our service level terms target 99.9% availability, measured monthly. An emergency support line is available 24x7 for critical issues. See our Terms of Service for the full service level and support terms.

Incident response

Should a data breach occur, we will notify affected users by email and by in-site notification within 7 business days, in line with Fair Information Practices. Our Privacy Policy describes how personal information is collected, used, and protected.

Mobile app permissions

The Delightree app requests device permissions narrowly: the camera is used only when uploading a real-time photo as proof of task completion, and the microphone only when uploading a video as proof of task completion.

Reporting a security issue

If you believe you have found a security vulnerability in Delightree, please email cs@delightree.com and we will follow up promptly.