Security & Privacy Compliance
Last updated: August 18, 2022
Float is SOC2 certified and GDPR compliant.
Your data is protected.
- We support AES 256-bit encryption and TLS 1.2 and one-way encrypt all passwords
- Our Website and Service are hosted by Google Cloud Platform in the United States.
- Here is an overview of the steps we take to secure your data.
Your rights
The European Union’s General Data Protection Regulation (GDPR) introduced new privacy laws that impact your rights and our practices for how we store and protect your data. Your rights include:
- Right to data portability: We offer a number of ways for you to export your data, via both CSV and API formats. Here is a guide we’ve put together to help you navigate these processes.
- Right to object & right to rectify: All of your available personal data can be viewed and amended at any time via our web application or our API. You can also unsubscribe from our marketing email by following the unsubscribe link at the bottom of the message. If you are unsure of the type or accuracy of personal data we have stored, you can email us at support@float.com and we’ll clarify, and where necessary, correct.
- Right to erasure: The account owner can delete your account from the account settings at any time. All your content will be deleted from our servers within 30 days. Individual people and project data can also be deleted at any time from within the app or via our API.
- Prompt breach notification: You’ll be notified promptly of breaches involving your personal data per the GDPR requirements outlined in Art. 34. You can also monitor the status of our account-wide systems at any time from our live status page: http://status.float.com
You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
