Data Security Policy

This Policy applies to all employees, contractors, consultants, vendors, service providers, administrators, and systems used to deliver Rise & Built services and all data processed through the Company's systems.

Confidentiality: Information should only be accessible to authorized persons.

Integrity: Information should remain accurate and protected from unauthorized modification.

Availability: Systems should remain available to authorized users whenever reasonably possible.

Least Privilege: Access rights limited to what is necessary to perform assigned responsibilities.

Access to systems and information is restricted based on business need. Authorized personnel receive only the minimum access necessary.

Access privileges may be revoked immediately upon termination of employment, termination of contractor relationships, security concerns, or policy violations.

User-uploaded documents may contain sensitive financial information. Access to uploaded materials is limited to authorized personnel where reasonably necessary for: technical support; troubleshooting; cybersecurity; fraud prevention; platform maintenance; legal compliance.

Personnel are prohibited from accessing documents for the purpose of providing individualized credit repair recommendations.

All personnel with access to sensitive information must maintain confidentiality.

The Company seeks to implement reasonable authentication controls including: unique user accounts; strong password requirements; secure credential management; session controls; multi-factor authentication for administrative users where feasible.

Data in Transit: Sensitive information transmitted using encrypted communication protocols such as TLS/HTTPS.

Data at Rest: Sensitive information stored using commercially reasonable encryption mechanisms where feasible.

No encryption method can guarantee absolute security.

The Company may maintain logs relating to: account access; administrative actions; authentication events; platform activity; system performance; security events.

Logs may be reviewed for troubleshooting, security monitoring, fraud prevention, and compliance purposes.

The Company maintains procedures intended to address suspected security incidents including: investigation; containment; remediation; recovery; notification where required by law.

If the Company determines that a security incident has resulted in unauthorized access to protected information, the Company may investigate the incident, assess affected information, notify affected individuals where required, notify regulators where required, and implement corrective measures in accordance with applicable law.

While Rise & Built implements reasonable safeguards, no system can guarantee complete security. Internet communications involve inherent risks; cyber threats continuously evolve; unauthorized access may occur despite safeguards.

Security Questions: security@riseandbuilt.com

Privacy Questions: privacy@riseandbuilt.com

General Support: support@riseandbuilt.com