At 1Mage Software, we prioritize the security and privacy of our developers and enterprise customers. This privacy policy describes the types of information we collect, how we process it, and our compliance with global data protection standards (GDPR, CCPA, and SOC 2 Type II controls).

1. Information Collection and Scopes

We collect essential metadata required to run our optimization, networking, or compliance audit engines. This includes client API keys, endpoint resource paths, telemetry log payloads, and billing configurations. We do not inspect or store the contents of transaction payloads unless explicitly configured by your cluster policies.

2. Processing and Security Safeguards

All data processed by 1Mage Software is encrypted in transit using TLS 1.3 and at rest using AES-256 blocks. We execute computing processes on serverless container edge nodes that automatically destroy runtime variables after completing each image transformation, API route proxy, or scanning instance.

3. Compliance & Audits

Our infrastructure undergoes annual third-party audits to maintain SOC 2 Type II, ISO 27001, and HIPAA compliance mappings. Security event logs are piped continuously to read-only compliance storage vaults to ensure audit integrity and prevent unauthorized revisions.

4. Your Privacy Rights

Developers and customers can request API token revocations, data exports, or complete record deletions under GDPR rules directly by contacting our security compliance team at support@1magesoftware.com. Requests are processed programmatically within 24 hours.