At Halo Mailbox, protecting customer information is a core priority. We implement security controls designed to safeguard user accounts, connected email data, and platform infrastructure.
Infrastructure Security
- HTTPS/TLS encryption for all network communication
- Secure cloud infrastructure
- Network firewalls
- Continuous monitoring
- Routine security updates
Authentication
Halo Mailbox uses secure OAuth authentication for supported providers, including Google. We never request or store your Google password.
Data Protection
- Encryption in transit
- Encryption at rest where applicable
- Access controls
- Principle of least privilege
- Secure credential management
Access Control
Access to production systems is restricted to authorized personnel with legitimate business needs. Administrative access is logged and monitored.
AI Processing
AI features process only the information necessary to deliver requested functionality. We do not use customer email content to train generalized AI models.
Security Monitoring
- Unauthorized access attempts
- Suspicious login activity
- API misuse
- Service abuse
- Infrastructure anomalies
Incident Response
If a security incident affects customer data, we will investigate promptly, mitigate the issue, notify affected users where required by law, and implement corrective actions to reduce future risk.
Responsible Disclosure
If you believe you have discovered a security vulnerability in Halo Mailbox, please report it through the support contact published on our website. We appreciate responsible disclosure and will investigate legitimate reports promptly.
User Responsibilities
- Use strong passwords
- Enable multi-factor authentication where available
- Protect their devices
- Review connected accounts periodically
- Report suspicious activity immediately
Continuous Improvement
Security is an ongoing process. Halo Mailbox regularly reviews and enhances its security controls to align with evolving industry best practices and applicable regulatory requirements.