Security Policy
Last updated:
Security Policy
Last updated: 1 August 2026 | Version 1.0
Lumetrix BV takes the security of your data seriously. This page summarises the measures we take. It is a general overview, not an exhaustive technical specification.
Data in Transit and at Rest
- All traffic to lumetrix.tv and our services is served over HTTPS/TLS.
- Passwords are stored using strong, salted hashing; we never store them in plain text.
Application and Infrastructure
- Modern security headers (Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, HSTS).
- Least-privilege access controls and row-level security on our backend.
- Secrets are held in a secure secret store and environment variables, not in client code.
- Input validation and protection against common web risks (XSS, injection, CSRF) on our forms and APIs.
- Rate limiting and abuse protection on authentication and sensitive endpoints.
Operations
- Regular dependency updates and security reviews.
- Logging and monitoring for security events.
- A personal-data breach procedure, including notification to affected users and the authorities where legally required.
Your Role
Use a strong, unique password, keep your devices and apps up to date, and enable any available account-protection features. Report vulnerabilities via our Responsible Disclosure policy (security@lumetrix.tv).