# Data privacy and security OpticCount was built "Security First": every stage – design, development and daily use – follows procedures that protect the confidentiality, integrity and availability of your data. This page sums up how your data is stored and who can reach it. ## Secure infrastructure in Israel - **Servers in Israel** – all data is stored and processed on the company's servers in Israel only, under advanced protections. - **Full logical separation** – the system architecture separates customer data, so there is no access or leakage between different businesses. - **Continuous backups** – data is backed up continuously and kept in a controlled, protected environment. ## Secure communication - **End-to-end encryption** – all traffic between users and servers is encrypted with advanced protocols (TLS 1.3). - **Strict access policy** – data is accessed only by authorized personnel, through strong authentication. ## Users and permissions - **Tailored permissions** – each user gets permissions by branch, catalog and system capability. See [Users](/en/guide/management/users). - **Role-based separation** – employees see only the operational information they need; managers get full control. - **Sign-in with Google** – a Google account is linked to a user only while that user is signed in to the app, and sign-in by email address works only when Google has verified the address. - **Continuous access control** – every action is written to an audit log, giving a full trail of system use. ## Secure development - **Israeli development team** – with a background in cybersecurity and information assurance, many of them veterans of IDF technology units. - **Security testing** – every new component goes through review and a code audit before release. - **Frequent releases** – security updates and bug fixes are deployed immediately to minimize exposure. See [Changelog](/en/changelog). - **Minimal third-party libraries** – only recognized, up-to-date libraries are used. ## Monitoring and control - **Monitoring tools** – dedicated systems for anomaly detection, activity monitoring and continuous security checks. - **Full change log** – the system records every critical action, so every change can be traced. - **Immediate response** – any suspected anomaly is handled quickly by the technical team. ## Trust and privacy - **Full customer ownership of data** – business data belongs to the customer alone and is not transferred or exposed to third parties. - **Institutional and government customers** – large, sensitive organizations in Israel work with OpticCount. - **Transparency** – security and privacy procedures are stated openly on this page and in the terms of use. ## Use of AI - **Column mapping in a catalog upload** – the **Suggest mapping with AI** button sends the AI only the column headers and a description of the shape of each column's values (for example "whole numbers, 13 digits"), never the cell contents. When the file is read, a column the app did not recognize by name may be sent with its header and up to five short sample values, to suggest a mapping for it. See [Catalog](/en/guide/management/catalog). - **Names for public barcodes** – when a scanned public barcode is not in your catalog, the app can suggest a name for it only if at least four other businesses carry that barcode under matching names. Only the item name is shown, with no details about those businesses, their prices or their quantities. In-store barcodes are excluded. See [The count page](/en/guide/counter). ## What is kept on an employee's device The device keeps only what is needed for fast work: a local copy of the catalog for quick lookup and a queue of scans waiting to be sent. The counts themselves live in the cloud and are synced, with no dependency on a specific device. See [The count page](/en/guide/counter). ## Related pages - [Users](/en/guide/management/users) – set roles and branch permissions - [Branches](/en/guide/management/branches) – block or open a branch for employees - [FAQ](/en/faq) – questions about data and storage - [Quick start](/en/quick-start) – sign up and start working