Security

A plain description of how we protect data. We would rather tell you what we actually do than publish a page of reassuring adjectives.

1. Technical measures

• Encryption in transit — TLS on every connection to the platform and the site.
• Encryption at rest — for stored customer data and backups.
• Access control — least privilege internally; staff access to customer data is limited to what support and operations genuinely require, and is logged.
• Password storage — hashed, never reversible, never logged.
• Uploads — validated by content, not by file extension; script execution is disabled in the upload directory.
• Backups — taken regularly and aged out on a fixed cycle.

2. The free tools run in your browser

Worth repeating, because it is the strongest security property we have: the 109 free tools process everything client-side. What you paste into them is never transmitted to us, so it cannot be stored, leaked, or subpoenaed from us. There is nothing to breach.

3. If something goes wrong

We will not pretend a breach is impossible. If one occurs, we investigate immediately, contain it, and notify: the supervisory authority within 72 hours where the GDPR requires it; affected individuals without undue delay where the risk to them is high; and affected customers without undue delay where we processed the data on their behalf, so they can meet their own obligations.

4. What we need from you

Use a strong, unique password. Do not share accounts. Remove team members when they leave. Report anything suspicious to security@govarova.com immediately.

5. Responsible disclosure

If you have found a vulnerability, please tell us at security@govarova.com before you tell anyone else. We will acknowledge you, work with you on a fix, and we will not pursue legal action against researchers who act in good faith, avoid privacy violations and service degradation, and give us reasonable time to fix the issue.

6. Contact

Security: security@govarova.com.

Randoye LLC, a Wyoming limited liability company, trading as Govarova.
30 N Gould St, Ste 5275
Sheridan, WY 82801
United States
legal@govarova.com

We are a fully remote company. The address above is our registered address for legal correspondence; we do not operate a public office and cannot receive visitors.