Security & Data Protection Policy

This Security & Data Protection Policy explains how PTP Pro works to protect user information, account access, business records, uploaded files, subscription data, integrations, and platform systems.

This policy is intended to provide transparency about our security practices. It should be read together with our Privacy Policy, Terms of Service, Cookie Policy, AI Usage Policy, and other related policies.

PTP Pro is committed to maintaining a secure and reliable platform for creative entrepreneurs, service providers, and business owners. We use commercially reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, misuse, loss, disclosure, alteration, or destruction.

• Secure account access and authentication practices.
• Encrypted website connections where appropriate.
• Access controls for systems and administrative tools.
• Security-minded development and platform maintenance.
• Monitoring and troubleshooting of technical issues.
• Use of trusted third-party providers for payments, hosting, email, AI, and integrations.

PTP Pro may protect and process different types of information depending on how users interact with the platform.

• Account information such as name, email address, username, and subscription status.
• Business records such as pricing calculations, inventory details, expenses, history, invoices, and saved records.
• Uploaded receipts, images, PDFs, and OCR-related files or extracted data.
• Support requests, form submissions, and communication records.
• Technical data such as IP address, browser type, device information, logs, and usage data.
• Integration-related data such as authorization tokens, connected account identifiers, or imported business data where applicable.

Users remain responsible for ensuring the information they enter, upload, or connect to PTP Pro is appropriate, accurate, and lawfully provided.

PTP Pro uses account-based access controls to help ensure that subscription features and saved information are available only to authorized users.

• Users are responsible for keeping login credentials confidential.
• Passwords should be unique, strong, and not reused across unrelated services.
• Users should not share account access unless expressly allowed by their plan.
• Users should promptly report suspected unauthorized access.

PTP Pro is designed to use secure connections where appropriate to help protect information transmitted between your browser and our website or platform.

• HTTPS/SSL/TLS connections help protect data in transit.
• Secure payment pages are handled by payment providers where applicable.
• Sensitive platform activity may be protected through authentication and session controls.
• Administrative access is limited to authorized personnel or service providers with legitimate operational needs.

While encryption helps protect data transmission, users should avoid entering sensitive information on unsecured networks or shared devices.

PTP Pro uses third-party payment processors to handle subscription payments, checkout, billing portals, renewals, failed payment notices, refunds, and payment-related workflows.

PTP Pro does not intend to store full payment card numbers on its servers. Payment processors may store and process payment information according to their own privacy policies, security practices, and compliance standards.

PTP Pro relies on hosting, infrastructure, software, plugins, databases, APIs, email systems, and other technology providers to operate the platform.

We work to use providers appropriate for the platform’s needs and to maintain reasonable safeguards for reliability, uptime, performance, backups, and security. However, third-party infrastructure may experience downtime, maintenance, outages, or security events outside of PTP Pro’s direct control.

PTP Pro may use AI and OCR providers to process calculator inputs, prompts, uploaded receipts, images, PDFs, extracted data, business details, and other user-submitted information necessary to provide requested features.

We aim to transmit and process AI-related information through appropriate technical channels and service providers. Users should still avoid submitting unnecessary sensitive information to AI or OCR tools.

• Review uploaded files before submitting them for OCR.
• Remove unnecessary sensitive information where possible.
• Verify AI and OCR results before saving or relying on them.
• Do not upload files you do not have permission to process.

PTP Pro may support current or future integrations with payment providers, suppliers, distributors, marketplaces, accounting platforms, email services, calendar tools, shipping providers, AI providers, and other business tools.

Connected integrations may use API keys, access tokens, authorization flows, account identifiers, session data, imported records, or other information required to provide the requested functionality.

Users are responsible for managing third-party account access, permissions, and authorization settings. Third-party services remain governed by their own security policies and terms.

PTP Pro retains information only as long as reasonably necessary to provide services, maintain accounts, support operations, comply with legal obligations, resolve disputes, enforce agreements, and improve the platform.

Some information may be retained for longer periods if required for billing, tax, accounting, security, fraud prevention, legal compliance, backup recovery, or legitimate business purposes.

Users are encouraged to export or save information they need before canceling, deleting, or abandoning an account.

Security is a shared responsibility. Users must take reasonable steps to protect their accounts, devices, business data, and connected services.

• Use strong passwords and keep credentials private.
• Do not share account access with unauthorized users.
• Keep devices, browsers, and operating systems updated.
• Log out on shared or public devices.
• Review imported, uploaded, and AI-generated data before using it.
• Maintain backups of important business records outside of PTP Pro where appropriate.
• Notify PTP Pro promptly if you suspect unauthorized access or misuse.

If PTP Pro becomes aware of a security incident that may affect user information, we will take reasonable steps to investigate, contain, remediate, and provide notice where required by applicable law.

Notification timing and method may depend on the nature of the incident, legal requirements, third-party provider involvement, and the information reasonably available at the time.

No website, software platform, digital service, internet transmission, hosting provider, payment processor, AI provider, or storage system can be guaranteed to be completely secure.

PTP Pro uses reasonable safeguards, but we cannot guarantee that unauthorized access, data loss, downtime, third-party breaches, user error, malicious attacks, or technical failures will never occur.

We may update this Security & Data Protection Policy as PTP Pro grows, adds features, changes providers, improves security practices, or adopts new technologies.

When updates are made, we will revise the “Last Updated” date. Material updates may be communicated through the website, platform, or email where appropriate.

If you have questions about this Security & Data Protection Policy or want to report a security concern, please contact us.