Privacy Policy

Introduction

NovaHaven INC, operating as EasyCloudSecure, treats privacy as foundational to customer trust. The company emphasizes a "security-first approach" across its platform, integrating data protection from design through operations.

Information We Collect

The company gathers only essential data needed for service delivery and improvement:

• Account details and login credentials
• Billing and payment information
• Usage analytics and platform performance data
• Limited device and browser information
• Order intake details you voluntarily share (domain name, registrar access notes, Cloudflare account email) so we can perform the configuration work you purchased

Data collection adheres to principles of transparency, proportionality, and necessity.

How We Use and Share Information

EasyCloudSecure commits to never selling, renting, or trading personal information. When third-party sharing becomes necessary — such as with payment processors, hosting providers, or analytics vendors — agreements mandate that partners maintain data protection standards matching or exceeding the company's internal requirements.

Our Security Practices

The platform employs enterprise-grade protections:

• AES-256 encryption for stored data
• TLS 1.3 encryption for data transmission
• Continuous intrusion detection and monitoring
• Role-based access controls limiting data exposure
• Regular penetration testing and vulnerability assessments

Independent security auditors regularly evaluate the company's defenses.

Compliance with Global Privacy Regulations

EasyCloudSecure complies with GDPR, CCPA, and other international privacy frameworks. Customers retain rights to access, correct, export, and request deletion of their personal data, with requests processed through dedicated workflows meeting statutory timelines.

Cross-Border Data Transfers

International transfers employ Standard Contractual Clauses, encryption for transit data, and comprehensive vendor evaluation. Enterprise clients may request customized data residency arrangements.

Credentials Handling

Access notes you provide during intake (registrar and Cloudflare credentials) are stored encrypted at rest and used only by authorized personnel. We wipe credentials within 24 hours of your order being marked completed. You can request earlier deletion at any time.

Incident Response & Breach Notification

Real-time monitoring and layered defenses aim to prevent unauthorized access. Should breaches occur, the company follows a protocol including rapid containment, forensic investigation, and compliant user notification.

Continuous Improvement

Privacy efforts involve annual reviews, external compliance auditing, and an internal privacy committee monitoring regulatory changes and enhancing protections.

Company Information