Again, details such as these ( precautions taken ) would be valuable on your site.
To repeat : the privacy policy and "about" sections need a lot of work considering the nature of this app.
To repeat : the privacy policy and "about" sections need a lot of work considering the nature of this app.
For what it's worth until we can do that, here's a quick rundown: all data is transmitted over https. While we use Elastic Load Balancers we don't terminate SSL at the load balancer so data makes to our web servers before being decrypted. Any audio recordings are stored encrypted in S3, and our RDS instances are also encrypted. Everything runs in a Virtual Private Cloud. Each service (ELB, EC2 instances, RDS, S3) runs in its own security group with IAM user roles that can be removed and reissued if needed.
We'll try to get this information up on the site fairly soon.