Encryption & Data Protection Policy

01 Purpose

Big Bull Technologies, LLC (“Big Bull Technologies,” “BBT,” “we,” “our,” or “us”) is committed to protecting Customer Data through appropriate technical, administrative, and organizational safeguards.

This Encryption & Data Protection Policy provides an overview of how Before the Call (“B4C”) protects information during transmission, storage, and processing.

For security reasons, this document intentionally describes our security practices at a high level and does not disclose confidential implementation details.

02 Our Philosophy

Customer trust depends on protecting Customer Data.

Our objective is to protect administrative information throughout its lifecycle.

03 Data in Transit

Information exchanged between supported devices and the Before the Call platform is protected using secure communication protocols intended to reduce the risk of interception or unauthorized disclosure.

Customers are encouraged to access B4C using secure, trusted network connections whenever reasonably practical.

04 Data at Rest

Customer information stored by the Before the Call platform is protected using appropriate security measures designed to reduce the risk of unauthorized access.

These protections apply to supported production environments and managed platform services used to deliver the application.

05 Password Protection

Where passwords are used, they are protected using industry-accepted cryptographic practices appropriate to the platform.

Big Bull Technologies personnel cannot retrieve or view user passwords.

06 Encryption Key Management

Cryptographic keys and other sensitive security materials are managed using secure operational practices appropriate to the underlying platform and infrastructure.

For security reasons, specific key management procedures are not publicly disclosed.

07 Access Controls

Customer Data is protected through layered access controls, including:

• Authentication
• Role-based authorization
• Administrative permissions
• Session management
• Audit logging
• Operational safeguards

Access is limited to authorized individuals with a legitimate business or organizational need.

08 Third-Party Infrastructure

Before the Call relies on carefully selected infrastructure and service providers to deliver the platform.

These providers may implement their own encryption, physical security, and operational safeguards.

Big Bull Technologies evaluates service providers as part of our overall security program.

09 Shared Responsibility

Security is a shared responsibility.

10 Continuous Improvement

Security practices are continuously reviewed and improved as technology, threats, and industry standards evolve.

Big Bull Technologies regularly evaluates opportunities to strengthen platform security while maintaining usability and performance.

11 Security Limitations

No technology can eliminate all security risks.

While Big Bull Technologies employs reasonable safeguards to protect Customer Data, Customers should also maintain appropriate organizational security practices and report suspected security issues promptly.

12 Changes to This Policy

Big Bull Technologies may update this Encryption & Data Protection Policy periodically.

Material changes will become effective on the published Effective Date after reasonable notice has been provided through the Services, our website, email, or another appropriate communication method.

13 Contact

Questions regarding encryption or data protection may be directed to Big Bull Technologies.

Security concerns may also be reported through our published security contact channels.

Big Bull Technologies, LLC
Email: ashlea@bigbulltech.io

14 Related Documents

• SEC-001 — Authentication Policy
• SEC-002 — Password Policy
• SEC-003 — Multi-Factor Authentication Policy
• TRU-001 — Security Overview
• TRU-003 — Data Security
• DAT-001 — Data Ownership Policy
• LEG-002 — Privacy Policy

15 Revision History