Encryption & Transport Security
All data transmitted between your browser and our servers is encrypted using modern TLS standards. This ensures that your team's estimates, discussions, and decisions remain private during transmission.
Data Protection
Room states are ephemeral and exist only as long as needed. We do not store sensitive project information, ensuring your team's estimates and discussions remain confidential.
Security Practices
- TLS Encryption: All traffic uses HTTPS with modern TLS protocols
- Ephemeral Data: Room data is temporary and deleted after sessions end
- No Long-term Storage: We don't keep your project details or estimates
- Secure by Default: Security is built into every feature, not added as an afterthought
Reporting Security Issues
If you discover a security vulnerability, please report it to security@alignlee.org. We take all security reports seriously and will respond promptly.