Back to Home

Security

Last updated: January 2025

Our Commitment to Security

At ProPrompter, security is a top priority. We are committed to protecting your data and maintaining the integrity of our service. This page outlines the security measures we implement to keep your information safe.

Privacy by Design: Your video recordings are never uploaded to our servers. All recording and processing happens locally on your device, ensuring your content remains private.

Security Features

SSL/TLS Encryption

All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols (HTTPS).

Secure Authentication

We use Google OAuth 2.0 for authentication, leveraging Google's robust security infrastructure.

PCI-DSS Compliant Payments

All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor.

Local Video Processing

Your recordings never leave your device. Videos are processed locally and downloaded directly to your storage.

Secure Data Storage

User data is stored on secure servers within the European Union with strict access controls.

Regular Updates

We regularly update our systems and dependencies to address security vulnerabilities.

Data Protection

What We Store

  • Account Information: Your name, email address, and profile picture (from Google OAuth)
  • Script Content: The teleprompter scripts you create and save
  • User Preferences: Your application settings and preferences
  • Subscription Data: Subscription status and billing history (payment details handled by Stripe)

What We Don't Store

  • Video Recordings: All recordings are processed locally on your device
  • Camera/Microphone Data: We never access or store your media streams
  • Full Payment Card Numbers: Payment processing is handled entirely by Stripe
  • Passwords: We use Google OAuth, so we never see or store your password

Infrastructure Security

Server Security

Our servers are hosted with reputable providers that maintain:

  • Physical security controls and 24/7 monitoring
  • Firewall protection and intrusion detection systems
  • Regular security audits and penetration testing
  • Automated backup systems

Application Security

We implement various security measures at the application level:

  • Input validation and sanitization to prevent injection attacks
  • Cross-Site Request Forgery (CSRF) protection
  • Cross-Site Scripting (XSS) prevention
  • Rate limiting to prevent abuse
  • Secure session management

Access Control

We maintain strict access controls to protect your data:

  • Access to user data is limited to authorized personnel only
  • All access to production systems is logged and monitored
  • We follow the principle of least privilege for system access
  • Regular review of access permissions

Compliance

ProPrompter is committed to complying with applicable data protection regulations:

  • GDPR: We comply with the General Data Protection Regulation for EU users
  • LOPDGDD: We comply with Spanish data protection laws
  • PCI-DSS: Payment processing through Stripe is PCI-DSS compliant

Your Security Responsibilities

You can help keep your account secure by:

  • Keeping your Google account secure with a strong password and 2FA
  • Not sharing your account credentials with others
  • Logging out of shared or public devices
  • Keeping your browser and operating system updated
  • Reporting any suspicious activity to us immediately

Incident Response

In the unlikely event of a security incident:

  • We will investigate and contain the incident promptly
  • Affected users will be notified as required by law
  • We will take steps to prevent similar incidents in the future
  • We will cooperate with relevant authorities as needed

Reporting Security Issues

If you discover a security vulnerability or have concerns about our security practices, please contact us immediately. We appreciate responsible disclosure and will work with you to address any issues.

Responsible Disclosure: If you find a security vulnerability, please report it to us before disclosing it publicly. We commit to investigating all reports and responding promptly.

Report a Security Issue

For security-related concerns, please contact us at:

Updates to This Page

We may update this security page from time to time to reflect changes in our security practices. We encourage you to review this page periodically.