Security Policy

Bellandor Fin Corp Pty Ltd takes the security of our platform and subscriber data seriously.

How we protect your data

• AES-256-GCM encryption for sensitive personal data
• TLS 1.3 for all data in transit
• Append-only audit logs for compliance records
• Multi-factor authentication via email OTP
• Rate limiting and brute force protection on all auth endpoints
• Regular security updates and dependency audits

Reporting vulnerabilities

If you discover a security vulnerability, please report it responsibly to:

Email: bellandorfin.corp@gmail.com

Subject: "Security Vulnerability Report"

We will acknowledge your report within 48 hours and keep you updated on our progress.

Data retention

• Session data: 2 years
• Security logs: 5 years (legal)
• Financial content logs: 7 years (ASIC compliance)

Contact

bellandorfin.corp@gmail.com

Bellandor Fin Corp Pty Ltd
Victoria, Australia