How we look after data
We collect very little and keep it only while it is useful. Card numbers never reach us at all. Below is what actually happens.
Payment data
Card details are entered on payment pages hosted by our processors, who are responsible for that data under their own PCI DSS obligations. What reaches our systems is a token, the card brand and the last four digits, which is enough for a customer to recognise their own saved method and nothing more.
Purchases made inside the mobile applications are handled entirely by Apple and Google. We receive a signed receipt, verify its signature, and record the entitlement.
Account data
An account is identified by a numeric code rather than a name or an email address. We never ask for a postal address or a date of birth, because the service works without them.
Everything we hold is listed in full in the Privacy Policy.
In transit and at rest
- All client-to-server traffic uses TLS. Certificates are issued by a public certificate authority and renewed automatically.
- Administrative interfaces are not reachable at a guessable address, are protected by authentication with rate limiting, and lock out after repeated failures.
- Databases are not exposed to the public internet; access is over the loopback interface through a connection pooler.
- Credentials and API keys live in environment files readable only by the service account, never in source control.
- Backups run on a schedule and are pruned automatically.
Retention
Operational records are kept only as long as they serve a purpose. Aggregate usage counters are retained for the life of the account so that customers can see their own consumption; support conversations are retained while the matter is open and for a limited period afterwards; transaction records are retained for as long as tax and accounting rules require.
Reporting a vulnerability
If you believe you have found a security problem in our software or infrastructure, write to security@ankelabs.com. Please include enough detail to reproduce the issue. We will acknowledge the report, keep you informed while we investigate, and credit you if you would like that. We do not take legal action against people who report problems in good faith and do not access other people's data while doing so.
Customers may ask what we hold about them and ask us to delete it, through privacy@ankelabs.com. Requests from law enforcement or regulators should be sent to legal@ankelabs.com; we respond to properly issued and legally binding requests, and we produce only what the request covers.