Security Policy

Effective Date: March 28, 2026

At Appnuma Unipessoal Lda, we prioritize the security of your data and are committed to implementing robust measures to protect the integrity, confidentiality, and availability of the information you entrust to us. This Security Policy outlines the security practices and protocols we adhere to in order to safeguard your data.

1. Introduction

Appnuma Unipessoal Lda ("we," "us," or "our") is dedicated to ensuring the security of our systems and protecting the data of our users. This Security Policy explains the measures we take to protect your information and the responsibilities of both our organization and our users in maintaining data security.

2. Data Security Measures

We implement a variety of security measures to ensure the safety of your personal and sensitive information:

• Encryption: All sensitive data transmitted between your device and our servers is encrypted using industry-standard protocols (e.g., SSL/TLS).
• Data Storage: Production systems for the YourAgent24 service are hosted in secure data centers in the United States, using infrastructure providers selected under appropriate contractual and technical safeguards. We may use additional regions or providers as described in our Privacy Policy and Data Processing Agreement.
• Access Controls: We enforce strict access controls to ensure that only authorized personnel have access to your data. Access is granted based on the principle of least privilege.
• Regular Security Audits: We conduct periodic security assessments and audits to identify and address potential vulnerabilities in our systems.
• Intrusion Detection Systems: Our infrastructure is monitored 24/7 for any unauthorized access attempts or suspicious activities.
• Secure Development Practices: Our development team follows secure coding practices to minimize the risk of security flaws in our applications.
• Backup and Recovery: We maintain regular backups of your data and have disaster recovery plans in place to support availability.

3. Access Control

Access to personal and sensitive data is restricted to authorized employees, contractors, and service providers who require access to perform their job functions. All personnel with access to data are required to sign confidentiality agreements and undergo regular training on data security best practices.

4. Data Encryption

We utilize advanced encryption technologies to protect data both in transit and at rest. This ensures that your information remains confidential and secure from unauthorized access or breaches.

5. Incident Response

In the event of a security incident or data breach, Appnuma Unipessoal Lda has a comprehensive incident response plan in place. This includes:

• Immediate Containment: Taking swift action to contain and mitigate the impact of the incident.
• Notification: Informing affected users and relevant authorities in accordance with GDPR and other applicable laws.
• Investigation: Conducting a thorough investigation to determine the cause and scope of the breach.
• Remediation: Implementing measures to prevent similar incidents in the future.

6. Third-Party Services

We engage reputable third-party service providers to support our operations, including data storage and processing. All third-party providers are required to adhere to stringent security standards and comply with GDPR and other relevant data protection regulations where applicable.

Specifically, we utilize OpenAI's services located in the United States to generate chatbot responses. We ensure that appropriate safeguards apply to protect your data in accordance with GDPR Chapter V where required.

7. Security Training and Awareness

All employees and contractors receive regular training on data security best practices and are kept informed about the latest security threats and mitigation strategies. This ensures that our team is equipped to handle data securely and respond effectively to any potential security issues.

8. Physical Security

Our infrastructure providers implement physical security measures at data centers to prevent unauthorized access, including surveillance systems, access control mechanisms, and secure perimeters.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy and to comply with legal obligations. Once the retention period expires, we securely delete or anonymize your data.

10. Compliance with Regulations

Appnuma Unipessoal Lda complies with applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR) and national laws in Portugal. We continuously monitor and update our security practices to remain compliant with evolving legal requirements.

11. Changes to This Security Policy

We may update our Security Policy from time to time to reflect changes in our security practices or legal requirements. Any updates will be posted on this page with an updated effective date. We encourage you to review this Security Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions about this Security Policy, your data security, or wish to report a security concern, please contact us:

• Email: support@youragent24.com
• Address: Rua Principal nº 38, 2350-479 Torres Novas, Portugal