We are committed to ensuring the security and protection of our website and the data of our value customers. The technologies, security controls and policies, and other industry best practices we implement help safeguard the services we offer and protect us from unauthorized access, data breaches and other security threats.

• User Data: We collect and store user data in accordance with applicable data protection laws such as California Privacy Rights Act (CPRA). Refer to our Privacy Policy for more details.

• Credit Card Holder Data: All online transactions are securely processed through a third-party payment gateway to ensure the highest level of security and protection for our customers' sensitive information

• Access Control: Access to user data is strictly limited to authorized personnel who require it to perform their duties.

Passwords: We enforce strong password requirements and recommend users choose unique, complex passwords. Passwords are stored using secure, irreversible hashing algorithms.

Cloud Hosting: Our services are hosted within Amazon Web Service’s (AWS) data centers and only leverage US-based regions/data centers. For more detail regarding AWS data center security, learn more here.

• Security Awareness: We provide regular training to our employees on website security best practices, including data protection, password hygiene, and phishing awareness.

• Confidentiality: All employees are required to adhere to strict security protocols.

• Antivirus/Antimalware: Weee! deploys Microsoft Defender on all system for antivirus/antimalware protection. Security team monnitors and responds to alerts generated in a timely manner.

• Intrusion Detection/Prevention: Weee! leverages multiple intrusion detection and prevention methodologies and tooling – including AWS GuardDuty and Inspector. Logging and alerting is centralized and monitored for potential intrusion attempts.

• Application penetration test: Weee! partners with trusted third-party security experts to perform thorough application penetration tests. These independent assessments help us uncover potential vulnerabilities in our software that could be exploited by malicious actors. Once the tests are complete, we prioritize resolving any identified issues promptly, ensuring that all findings are addressed in a timely manner.

• Vulnerability Disclosure Program: Weee! collaborates with a reputable third-party provider to manage our vulnerability disclosure program. This partnership enables security researchers and ethical hackers to report potential vulnerabilities in our systems in a structured and secure manner. By leveraging the expertise of this third-party platform, we ensure that reported vulnerabilities are reviewed, validated, and addressed efficiently. Please use our form to report security vulnerabilities to Weee! through our Bugcrowd partner portal. Weee! generally scores vulnerabilities based on the CVSS score.