Security and privacy

SiteCargo protects its platform and technical integration data. The app owner is responsible for the connected website, employee access, app content, lawful data processing, and an up-to-date privacy policy.

What to check before publication

• SiteCargo sign-in is confirmed by a code sent to email or phone; the code is valid for 10 minutes;
• the email account uses a unique password;
• Apple and Google access is granted to separate users with minimum permissions;
• the builder, JavaScript, and cookies contain no passwords, tokens, or private keys;
• the website uses HTTPS, and sign-in, sign-out, and password recovery have been tested on a real device;
• the review test account has no administrator permissions or real data;
• the privacy policy describes actual data collection and account deletion;
• access for former employees and contractors has been revoked.

End-user authentication is handled by the connected website. SiteCargo does not replace its accounts, passwords, or permissions system.

In this section

• Data and privacy policy
• Access, cookies, and secrets
• Data leaks and vulnerabilities