These Security Incident Terms supplement the Terms of Service and the Data Processing Addendum. They describe how FlashTower responds to and notifies customers of security incidents affecting Customer Data held by FlashTower.
1. What is a Security Incident
A “Security Incident” is a confirmed breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Data in systems controlled by FlashTower or its subprocessors. Unsuccessful attempts that do not compromise Customer Data — such as blocked sign-in attempts, port scans, or denial-of-service attempts — are not Security Incidents.
2. Notification
FlashTower will notify affected customers of a Security Incident without undue delay and in any event within 72 hours of confirmation, by email to the organization's Owners and, where appropriate, in the application. The notice will describe, to the extent then known, what happened, the data affected, likely consequences, the measures taken, and a contact point. FlashTower will provide updates as its investigation progresses.
3. FlashTower's response
FlashTower will take reasonable steps to contain, investigate, and remediate the Security Incident, preserve relevant evidence, and prevent recurrence, and will provide reasonable assistance to help customers meet their own notification obligations.
4. Customer responsibilities
Customer, as controller, is responsible for determining and making any notifications to its regulators, affected individuals, and other third parties, unless the parties agree otherwise in writing or the law requires FlashTower to notify directly. Incidents occurring in Customer's own environment, systems, or third-party services — including those FlashTower Monitor alerts on — are not FlashTower Security Incidents, and FlashTower alerts are not incident notifications under these terms.
5. No admission of fault
Notification of or response to a Security Incident is not an acknowledgement by FlashTower of any fault or liability.
6. Reporting a suspected incident
Report a suspected security issue affecting FlashTower to security@flashtower.com. Vulnerability reports are handled under the Responsible Disclosure Policy.
Contact
FlashTower is operated by Boostlete LLC, 1620 N Carpenter Rd, Suite D46, Modesto, CA 95351. Privacy and legal notices: privacy@flashtower.com. Security: security@flashtower.com. Security officer: Founder (acting Security Officer). Support: support@flashtower.com. Billing: billing@flashtower.com. General inquiries: hello@flashtower.com.