Security Policy

1. We Never Ask for Provider Passwords

We never request or store your internet provider account password. Authorization to act on your behalf is handled through a signed Letter of Authorization, which providers accept as proof of your consent without requiring us to log in as you.

2. Data Security

• Encryption of sensitive data in transit and at rest, consistent with industry standards.
• Access controls limiting data access to authorized personnel on a need-to-know basis.
• Regular review of system configurations and access permissions.
• Use of PCI-compliant third-party processors for payment card handling.

3. Incident Response

We maintain an internal incident response process for identifying, containing, and remediating security incidents. Where a security incident affects customer personal information, we will notify affected customers and relevant authorities as required by applicable law.

4. Employee Security Practices

Employees and contractors with access to customer systems or data undergo background screening where legally permitted and receive periodic security awareness training, with particular attention to handling account authorization documents responsibly.

5. Customer Responsibilities

Customers play an important role in security by using strong, unique passwords with their own provider accounts, verifying any Letter of Authorization request actually came from us, and promptly reporting anything that looks like a phishing attempt using our name.

6. Reporting a Vulnerability

If you believe you've identified a security vulnerability affecting our systems, please report it responsibly to security@starsatelliteinternet.net. We ask that you avoid accessing or modifying data that isn't yours and give us a reasonable opportunity to investigate and remediate before public disclosure.