Security & Data Protection at GStocky

Our Approach to Security

GStocky uses appropriate technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or loss. Security is an ongoing risk-management process, so we review controls and update systems as the platform evolves.

No online service can promise absolute security. Our aim is to use proportionate safeguards, reduce avoidable risks, and respond responsibly when issues are identified.

Data Protection Measures

Our security practices combine technology, access management, and operational controls.

• Encrypted HTTPS/TLS connections.
• Access controls for accounts and production systems.
• Infrastructure security and database access restrictions.
• Backups designed to support operational recovery.
• Service and infrastructure monitoring.
• Security updates and maintenance.
• Trusted cloud service providers.

Infrastructure and Hosting

GStocky's application, API, and main MySQL database are hosted on Hetzner infrastructure in Germany. Files and objects are stored using Google Firebase / Google Cloud Storage configured in the European Union. Cloudflare provides DNS, content delivery, network security, and DDoS protection through its global network.

Controlled Access

Production-system and database access is restricted according to operational need. Workspace owners are responsible for deciding who they invite, assigning appropriate permissions, and removing access when it is no longer needed.

GStocky personnel may access information only where reasonably necessary to operate, secure, troubleshoot, or support the service, or to meet legal obligations.

Backups, Monitoring, and Updates

We use backups, monitoring, and regular security updates as part of our operational safeguards. These measures are designed to support resilience, identify issues, and reduce the likelihood or impact of service disruption or data loss; they are not a guarantee that incidents can never occur.

International Data-Protection Safeguards

Cloudflare and other supporting services may process information outside a user's country. Where required, GStocky uses appropriate contractual, technical, and organizational safeguards for international data transfers.

For processing activities subject to Moroccan law, CNDP compliance procedures are being undertaken in accordance with Law No. 09-08.

Customer Security Responsibilities

Security works best as a shared responsibility. Customers should use strong, unique passwords, enable available account protections, limit user permissions, protect endpoint devices, review access regularly, and contact GStocky promptly if they suspect unauthorized activity.

Compliance and Certification Status

The statuses below are provided for transparency and can be updated when a formal reference or verified certification is obtained. They are not certification badges.

Report a Security or Privacy Concern

If you believe you have found a security issue or need to discuss privacy and security requirements, contact our team. Please describe the issue without including passwords, access tokens, or other credentials.