Security And Privacy

Amental to DataFetch. We always put ourselves in our customer's shoes to ensure we do what is in their best interest.

We Don't Store Your Data
DataFetch does not download your data, documents, or messaging to our servers.
Encryption
All data is encrypted end-to-end using industry standard methods like AES-256 and TLS1.2. It is encrypted in transit and at rest.
Least Privileged Access
DataFetch requests only the 'must-have' permissions, which in most cases is read-only. We cannot modify or delete your data.

Security Details

Cloud Providers

DataFetch is hosted on Google Cloud Platform. All data centers are located in the United States.

Creation of DataFetch accounts

Individuals are able to create a DataFetch account using Slack or Microsoft Teams. DataFetch accounts are bound to Slack and Microsoft Teams user accounts.

Data Encryption

DataFetch exclusively sends data over HTTPS transport layer security (TLS) encrypted connections for additional security as data transits to and from the application. All data on DataFetch servers is encrypted at rest. Google Cloud Platform stores and manages data cryptography keys in its redundant and globally distributed Key Management Service (KMS). DataFetch has complete control over access to the KMS and has restricted access within the organization.

Data Storage / Download

DataFetch does not download or store records, reports, files, documents, etc. on DataFetch servers. Once a result is sent to the user, DataFetch automatically purges any related information from their servers. We only store the information about user actions within DataFetch (e.g. performs a search). For more information about data we collect, refer to our Privacy Policy.

What information does DataFetch store?

DataFetch stores information about your account, the applications that you connect to DataFetch, searches, and other actions you perform. For example, we store an action when you perform a search and click on a result. We don't store the contents of the record or query that you viewed or sent, but we do know the source of the data. For more information about the information we store, please refer to our Privacy Policy.

Do you sell my data to 3rd parties?

No. All data stays within DataFetch systems and is not sold to 3rd parties. We do not intend to ever sell your data to 3rd parties.

Why am I requested to enter my password when connecting a data source to DataFetch?

DataFetch prefers to use industry standard OAuth 2.0 to connect your data sources. Depending on the data source you connect, that platform may ask you to enter your password to verify your identity. This is purely for security purposes and DataFetch does not receive your password from these applications. Some types of data sources do not use OAuth for authentication. In these scenarios, credentials may need to be collected and stored by DataFetch. In these cases, DataFetch stores credentials within Google Secret Manager.

What happens when I remove a data source from DataFetch?

When you remove a data source from DataFetch, we automatically remove the backend information from our systems. This is typically done within 1-3 minutes of you removing the data source. If you want to re-connect the application, DataFetch requires you to create a new data source from scratch.

Compliance

DataFetch is hosted on Google Cloud Platform. Google Cloud Platform undergoes various third-party independent audits regularly and can provide verification of compliance controls for its data centers, infrastructure, and operations. This includes, but is not limited to, SSAE 18-compliant SOC 2 certification and ISO 27001 certification.

Privacy

DataFetch takes privacy seriously. We retain the minimum amount of data necessary to operate our product offering. Further details can be found in our Privacy Policy.

Terms of Service

For details about the terms in place for using DataFetch please visit our Terms Of Service page.

If I have more questions, who can I talk to at DataFetch?

If you have more questions or concerns about security and data, please reach out to security@datafetch.io. We love talking about this stuff!