Security & Data Protection Policy
Review this document carefully. Print or download a dated copy for your records.
Security commitment
JENECONK applies layered administrative, technical, and operational safeguards to Business Suite accounts, document workflows, payments, administration, and service infrastructure. No internet-based service can guarantee absolute security, but we review and improve safeguards as the platform and relevant risks evolve.
Data encryption
Production traffic is transmitted over HTTPS to protect information in transit between supported browsers and the platform. Managed infrastructure providers apply their own storage, encryption, and security controls under their service terms and technical standards.
Secure storage
Account records, workspace data, document records, payment references, and operational records are stored using managed hosting and database services with restricted access. Sensitive service credentials are kept in protected server environments and are not intentionally exposed in browser code.
Access controls
Access is limited according to role and operational need. Customer workspace records are protected by account and database authorization controls. Sensitive administrator routes require server-side authorization, and JENECONK platform administration uses additional identity and multi-factor checks.
Audit logs
The platform records selected payment, credit, unlock, administrator, support, security, and other sensitive actions to support investigation, accountability, fraud prevention, and operational review. Audit coverage may vary by feature and does not record every user interaction.
User authentication
Business Suite uses protected authentication and session handling. Users must use a strong, unique password, secure their email account and device, sign out on shared devices, and report suspicious activity promptly. Users must never disclose passwords or one-time authentication codes to support personnel.
Backup and recovery procedures
Managed service providers may maintain infrastructure backups, redundancy, or recovery capabilities according to their service arrangements. Backups support service resilience but are not a substitute for users retaining copies of important final documents. Restoration of an individual deleted item cannot be guaranteed.
Incident response
We assess credible security reports, contain or restrict affected access where appropriate, preserve relevant records, investigate impact, restore secure operations, and notify affected users or authorities where required by applicable law.
Third-party providers
Business Suite relies on carefully selected providers for services such as hosting, database infrastructure, authentication, payment processing, AI assistance, communications, and monitoring. These providers process limited information needed to perform their services and maintain their own privacy and security obligations. JENECONK does not sell customer data.
Customer ownership and limited processing permission
Uploaded documents remain the property of the customer, subject to any rights belonging to third parties whose material they contain. Customers grant JENECONK and necessary service providers only the limited permission required to store, process, analyze, generate, export, support, secure, and deliver the requested service.
Data deletion rights
Users may request deletion of eligible account and document data, subject to identity verification and lawful retention requirements. Payment, fraud-prevention, security, dispute, audit, or regulatory records may need to be retained for a limited period. Further details are provided in the Data Retention & Deletion Policy.
Reporting security concerns
Use the Report Abuse page or email info@jeneconk.com with the subject "Security Report". Do not publicly disclose passwords, personal documents, access credentials, or sensitive exploit details while an investigation is active.