Security Practices

• Encryption: Data is encrypted in transit over TLS and at rest with industry-standard encryption.
• Access control: Staff access is limited to what a role requires, and access to personal data is logged.
• Secure infrastructure: The platform runs on managed cloud infrastructure with patching and isolation.
• Backups: Encrypted backups are taken regularly and restores are tested.
• Review: Code and configuration are reviewed, and dependency updates are tracked and applied.

• Use a unique password: One that protects no other account.
• Keep your email current: Security notices and password resets go there; a stale address locks you out.
• Sign out on shared devices: Closing the tab is not the same as signing out.
• Report anything odd: Unexpected sign-in notices, messages you did not send, jobs you did not post.

Should a breach affect your personal data, we contain the incident, assess what was exposed, and notify affected users and the relevant authorities as the law requires — typically within 72 hours of discovering it.

If you believe you have found a security flaw, email info@techihub.io with enough detail to reproduce it, and give us a reasonable window to fix it before publishing. We will not pursue good-faith research that respects user privacy and avoids damage to the service.