Data Security Statement

Our Commitment

At FableForce, we are dedicated to protecting the security and confidentiality of your data. We implement and maintain robust security measures to safeguard your information against unauthorized access, disclosure, alteration, and destruction.

Security Measures

1. Encryption

• We use industry-standard encryption protocols (such as SSL/TLS) to protect data in transit.
• Sensitive data at rest is encrypted using strong encryption algorithms.

2. Access Control and Authentication Security

• We employ strict access controls and authentication mechanisms.
• Access to sensitive data is granted on a need-to-know basis.
• Regular access reviews are conducted to ensure appropriate permissions.

OAuth and Third-Party Authentication Security

When you use Google Sign-In or other third-party authentication:

• No Password Storage: We never store your Google password or credentials
• Secure Token Handling: OAuth access tokens are encrypted and stored securely
• Token Expiration: Authentication tokens have limited lifespans and are automatically refreshed
• Scope Limitation: We only request the minimum permissions necessary from Google (name, email, profile picture)
• Secure Communication: All communication with Google's OAuth servers uses industry-standard TLS encryption
• Revocation Support: You can revoke FableForce's access to your Google account at any time through your Google account settings

3. Network Security

• Our systems are protected by firewalls and intrusion detection/prevention systems.
• We conduct regular vulnerability scans and penetration testing.

4. Physical Security

• Our data centers have 24/7 security personnel, video surveillance, and strict access protocols.
• We maintain redundant power supplies and climate control systems.

5. Data Backup and Recovery

• We perform regular data backups.
• We have established and tested disaster recovery and business continuity plans.

6. Employee Training

• All employees undergo regular security awareness training.
• We have established and enforce security policies and procedures.

7. Third-Party Risk Management

• We carefully vet and monitor our third-party service providers.
• We require our partners to adhere to stringent security standards.

8. Incident Response

• We have a dedicated incident response team.
• We have established procedures for timely notification of any data breaches.

9. Compliance

• We comply with relevant industry standards and regulations.
• We undergo regular security audits and assessments.

Your Role

While we implement these security measures, the security of your account also depends on you:

• Keep your login credentials confidential.
• Use strong, unique passwords (for email/password accounts).
• Log out of your account when using shared devices.
• Report any suspicious activities immediately.

If You Use Google Sign-In

Additional security responsibilities when using Google authentication:

• Secure Your Google Account: Enable two-factor authentication (2FA) on your Google account
• Monitor Google Account Activity: Regularly review which apps have access to your Google account
• Revoke Access If Compromised: If you suspect your Google account has been compromised, immediately revoke FableForce's access through your Google account settings
• Keep Google Account Secure: Ensure your Google account password is strong and unique
• Review Permissions: Periodically review what information FableForce can access from your Google account

Continuous Improvement

We continuously monitor, review, and enhance our security measures to address new and evolving threats.

Contact Us

If you have any questions or concerns about our data security practices, please contact our Security Team at security@fableforce.com.

Last updated: December 2025