Security Policy – Incash.me
Last Updated: [05-03-2025]
At Incash.me, we take security seriously. This Security Policy outlines the measures we implement to protect user data, transactions, and the integrity of our platform. By using Incash.me, you agree to adhere to our security guidelines.
1. Data Protection & Encryption
1.1. End-to-End Encryption:
• All sensitive data, including personal and financial information, is encrypted using industry-standard encryption protocols (TLS/SSL).
• Payment data is never stored on our servers and is securely processed through trusted third-party payment gateways like Stripe, PayPal, Coinbase, Blockchain.com, Binance Pay API, and Incash.me’s internal payment system.
1.2. Secure Storage:
• User passwords are stored in a hashed and salted format, ensuring they cannot be decrypted.
• Any stored user data follows strict security standards to prevent unauthorized access.
2. Account Security
2.1. Two-Factor Authentication (2FA):
• Users are encouraged to enable 2FA to add an extra layer of security to their accounts.
2.2. Login Protection:
• We monitor login attempts and implement rate limiting to prevent brute-force attacks.
• Suspicious login activities may trigger additional security verifications.
2.3. Session Management:
• Automatic session timeouts are enforced to protect inactive accounts.
• Users are advised to log out when using public or shared devices.
3. Fraud Prevention & Monitoring
3.1. Transaction Monitoring:
• All transactions are monitored in real-time to detect fraudulent or suspicious activities.
• High-risk transactions may be flagged for manual review before processing.
3.2. KYC (Know Your Customer) & AML (Anti-Money Laundering) Compliance:
• Users may be required to complete identity verification (KYC) to prevent fraud.
• Transactions are monitored in compliance with anti-money laundering (AML) regulations.
3.3. Account Freezing & Investigation:
• If fraudulent activity is detected, Incash.me reserves the right to temporarily freeze or suspend accounts while an investigation is conducted.
4. Third-Party Payment Gateway Security
4.1. Trusted Payment Partners:
• We only integrate with reputable and PCI DSS-compliant payment processors, including:
• Stripe
• PayPal
• Coinbase
• Blockchain.com
• Binance Pay API
• Incash.me’s internal system
4.2. Secure Payment Processing:
• All payment transactions occur on secure third-party platforms, ensuring that Incash.me never directly handles or stores sensitive financial data.
5. User Responsibilities & Best Practices
5.1. Protect Your Credentials:
• Never share your passwords, security codes, or account details with anyone.
• Use a strong and unique password for your Incash.me account.
5.2. Beware of Phishing Attempts:
• Incash.me will never ask for your login credentials via email or phone.
• Always verify the authenticity of communications before responding.
5.3. Keep Your Devices Secure:
• Ensure your devices have updated security software and firewalls enabled.
• Avoid accessing your account from public or unsecured Wi-Fi networks.
6. Incident Response & Breach Notification
6.1. Immediate Action:
• In the event of a security breach, we will take immediate action to contain the issue and minimize any potential impact.
6.2. User Notification:
• If your data is affected by a breach, we will notify you as soon as possible via email or platform alerts.
6.3. Reporting Security Issues:
• If you identify a security vulnerability, report it immediately to security@incash.me.
• We encourage responsible disclosure and may offer bug bounties for valid security reports.
7. Compliance with Security Standards
• Incash.me follows industry best practices for cybersecurity, including compliance with:
• PCI DSS (Payment Card Industry Data Security Standard)
• GDPR (General Data Protection Regulation) – for users in the EU
• CCPA (California Consumer Privacy Act) – for users in California
• AML & KYC regulations for financial transactions
8. Changes to This Security Policy
We may update this policy as necessary to reflect improvements in our security measures. Any changes will be communicated through our platform.
9. Contact Us
For any security-related concerns, please contact us at:
📧 security@incash.me
By using Incash.me, you acknowledge that you have read, understood, and agreed to this Security Policy.