Security Policy

Last updated: January 15, 2024

This website (https://dinosms.com) is owned and operated by Dino Nexus LLC, a company registered in the United States.

All services provided on this platform are managed under Dino Nexus LLC.

Our Security Commitment

At DinoSMS, we take the security of your data and our service extremely seriously. We implement industry-leading security measures to protect your information and ensure the integrity of our SMS verification service.

1. Data Encryption

In Transit

All data transmitted between your browser and our servers is encrypted using TLS 1.3, the latest and most secure encryption protocol. We enforce HTTPS across our entire platform.

At Rest

Sensitive data stored in our databases is encrypted using AES-256 encryption. This includes user credentials, payment information, and SMS history.

2. Infrastructure Security

•
Cloud Security: Hosted on enterprise-grade cloud infrastructure with built-in DDoS protection and automatic security updates
•
Firewall Protection: Multiple layers of firewalls to prevent unauthorized access
•
Regular Backups: Automated encrypted backups with point-in-time recovery capabilities
•
Isolated Environments: Production, staging, and development environments are completely isolated

3. Authentication & Access Control

Strong Password Requirements

Minimum 8 characters with complexity requirements

Two-Factor Authentication (2FA)

Optional 2FA available for enhanced account security

Session Management

Automatic session timeout and secure token handling

Rate Limiting

Protection against brute force and automated attacks

4. Payment Security

PCI DSS Compliance

We are fully PCI DSS compliant. We never store credit card numbers on our servers. All payment processing is handled by certified payment processors with the highest security standards.

• Tokenized payment processing
• No storage of credit card details
• Encrypted payment communications
• Regular security audits

5. Monitoring & Incident Response

24/7 Monitoring

• Real-time threat detection
• Automated alerts
• Performance monitoring
• Anomaly detection

Incident Response

• Rapid response team
• Documented procedures
• User notification protocols
• Post-incident analysis

6. Security Best Practices for Users

To maximize your account security:

✓ Use a unique, strong password for your DinoSMS account
✓ Enable two-factor authentication when available
✓ Never share your account credentials
✓ Log out when using shared or public computers
✓ Keep your email account secure
✓ Report suspicious activity immediately
✓ Regularly review your account activity

7. Vulnerability Disclosure

We welcome security researchers to help us maintain the highest security standards. If you discover a vulnerability:

Responsible Disclosure Process

Email security@dinosms.com with details
Include steps to reproduce the issue
Allow us reasonable time to respond (48 hours)
Work with us to understand and resolve the issue

We appreciate responsible disclosure and may offer bug bounties for significant vulnerabilities.

8. Compliance & Certifications

GDPR Compliant

EU data protection standards

PCI DSS

Payment card security

SSL/TLS

Encrypted connections

ISO Standards

Information security

9. Updates to This Policy

We may update this Security Policy as we improve our security measures and adopt new technologies. We will notify users of significant changes through our website or email.

10. Contact Us

For security concerns or questions about our security practices:

DinoSMS Security Team

Email: security@dinosms.com

Response Time: Within 24-48 hours

For urgent security issues, please mark your email as URGENT