Password Management
As of October of 2009, Pelotonics no longer includes passwords in the body of system email messages. Any time you establish a new password or request an old one, you or the person you invite into the system will be redirected back to the online interface via a secure link. Once you open that link in a browser, you will then have the opportunity to change the password. This ensures that your password, and the passwords of those you invite into the system are protected, secure, and not just sitting in your email inbox.
Account Changes
Pelotonics employees are not authorized to make account changes on your behalf. If you would like to upgrade, cancel, edit, or delete something from Pelotonics, we are happy to assist you through education and online help. We firmly believe that your data is your data. Accordingly, any major changes to your data will remain in your hands.
Encryption
Any time your password or credit card information is involved, we
encrypt the webpage and database field used for such information. Encryption of your whole project portal is
available with the Silver Plan or higher.
Infrastructure
We host our servers and your information at a secure data facility including biometric identification-based access. Redundancy is built into all that we do to make sure that your data is safe. All information is backed up on the hour to minimize any data loss in the case of an incident. Our file servers are hosted with Rackspace, a leader in the hosting industry including redundancy and maximum up-time capabilities.
Security Suggestions
Messages and Comments from the Pelotonics system are sent out as emails. Emails are not encrypted and they're sent over the wire as plain text. Thus, we suggest that you do not share private or personal information in Messages that will be sent out from the Pelotonics system such as passwords, SSN's, banking information, etc. If you want your information to remain secure, don't distribute the Message or Comment as an email from the system; and of course, enable the SSL encryption for your site.
Concerns?
If you want to know more about our security philosophies or if you think you have found a security flaw or possible exploit, we want to hear from you ASAP! Use
our public key to send your sensitive and urgent email to us at
security@pelotonics.com or contact us at 858-736-9494. We will respond to these requests with the highest priority.