Security

1. Infrastructure Security

• All data in transit is encrypted using industry-standard TLS.
• Application infrastructure runs on reputable cloud providers with strong physical and network security controls.
• Access to production systems is restricted to authorized personnel and protected by strong authentication.
• We continuously monitor our systems for unusual activity and apply security patches promptly.

2. Data Protection

• Your selfie is processed for the limited purpose of generating your personalized campus photo and is not used for unrelated purposes.
• Your selfie is retained only for the minimum period needed to produce and deliver your image, then removed from active storage.
• Access to stored data is limited to systems and personnel that need it to operate the platform.

3. Access Control

• Internal access to user data follows the principle of least privilege.
• Administrative actions on the platform require authentication.
• We periodically review access permissions to ensure they remain appropriate.

4. Responsible Disclosure

If you believe you have discovered a security vulnerability in AdMirror, we take that seriously.

• Please provide enough detail to reproduce the issue, and avoid accessing or modifying data that isn't yours.
• Please allow a reasonable amount of time for investigation and resolution before any public disclosure.
• We review and act on all credible security reports we receive.

5. Your Role in Security

• Only upload photos you have the right and consent to use.
• Use AdMirror from a trusted device and network when possible.
• Be cautious of any site claiming to be AdMirror that asks for unnecessary personal information.