Security Disclosures

At PalConnect, user safety is not a feature — it is the foundation of our platform. We are committed to ensuring that users can live share their location without fear, without compromise, and without unauthorized access.

---

1. Single Device Locking System

Each PalConnect account is cryptographically bound to a single registered device. If a login attempt is detected from a different device:

• The account is automatically frozen.
• The user is notified for verification.
• Access is restricted until security review is completed.

This prevents unauthorized duplication, cloning, or parallel device access.

---

2. Multi-IP & Anomaly Detection

PalConnect monitors IP address patterns and session behaviors. If suspicious activity is detected:

• The account is flagged for review.
• Simultaneous session access is blocked.
• Security logs are preserved for audit investigation.

---

3. Account Inaccessibility Protection

If unusual login behavior is detected, PalConnect automatically:

• Freezes the account to prevent compromise.
• Restricts all live location sharing sessions.
• Prevents PIN brute-force attempts.

Security protection overrides convenience. User safety comes first.

---

4. Encrypted Credentials

• All PINs are securely hashed using industry-standard encryption methods.
• Plain-text PIN storage is never permitted.
• View PIN is stored separately from Login PIN.
• Future upgrades include database-level encryption layers.

---

5. Live Location Sharing Protection

Location sharing on PalConnect is:

• Voluntary
• Session-based
• User-controlled
• Time-limited

Location data is never publicly exposed and is accessible only to authorized session participants.

---

6. Intrusion Prevention & Monitoring

• Device fingerprint verification
• Login attempt monitoring
• Rate-limiting mechanisms
• Future OTP (One-Time Password) integration
• Planned Multi-Factor Authentication (MFA)

---

7. Zero Data Sale Commitment

PalConnect does not sell, lease, or trade user location data. Your live location belongs to you — always.

---

Security Reporting

If you believe you have identified a vulnerability, please contact us immediately:

info@palconnect.online

All reports are handled confidentially and investigated promptly.

---

PalConnect — Secure. Private. Voluntary Location Sharing.