Skip to content

Commit 00af945

Browse files
authored
Merge pull request #26 from dekart-xyz/cloud-security-faq
Cloud security FAQ
2 parents 4aa45c2 + eb11cfa commit 00af945

File tree

7 files changed

+92
-45
lines changed

7 files changed

+92
-45
lines changed

Diff for: config/_default/menus.toml

+6
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,12 @@
1616
identifier = "configuration"
1717
url = "/docs/configuration/"
1818

19+
[[docs]]
20+
name = "Dekart Cloud"
21+
weight = 3
22+
identifier = "cloud"
23+
url = "/docs/cloud/"
24+
1925
[[docs]]
2026
name = "About"
2127
weight = 1

Diff for: config/_default/params.toml

+1-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
## Homepage
44
title = "Dekart"
55
titleSeparator = "-"
6-
titleAddition = "Maps for your Data Platform"
6+
titleAddition = "Advanced WebGL Geospatial Analytics"
77
description = "Open-source WebGL-powered map visualization and spatial analytics for modern data warehouses."
88

99
## Open Graph + Twitter Cards

Diff for: content/_index.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title : "Maps for your Data Platform."
2+
title : "Advanced WebGL Geospatial Analytics"
33
description: "Open-source WebGL-powered map visualization and spatial analytics for modern data warehouses."
44
lead: "Open-source, lightweight alternative to CARTO and Foursquare Studio for data scientists, analysts and engineers."
55
date: 2020-10-06T08:47:36+00:00

Diff for: content/docs/cloud/cloud-security-faq.md

+43
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
---
2+
title: "Security Considerations"
3+
description: "Why Dekart Cloud is Secure"
4+
date: 2021-02-22T07:48:05+01:00
5+
lastmod: 2021-02-22T07:48:05+01:00
6+
draft: false
7+
menu:
8+
docs:
9+
parent: "cloud"
10+
images: []
11+
---
12+
13+
<p class="lead text-left"><a href="/">Dekart Cloud</a> is designed to make your cybersecurity and legal teams happy. We achieve it by never storing tokens, and query results in Dekart Cloud backend.</p>
14+
15+
<!-- * **Passthrough Authentication**: Short-lived Google OAuth token is passed from your browser to Google APIs and never stored on Dekart Cloud backend.
16+
17+
* **No User Data Storage**: Query results are stored on Google Cloud Storage bucket provided by you.
18+
19+
* **Compliance Friendly**: We comply with [Google API Services User Data Policy](https://cloud.google.com/terms/services) and verified by Google's Trust & Safety team. -->
20+
21+
### What permissions am I granting to Dekart, and why are they necessary?
22+
23+
You are granting Dekart the following scopes:
24+
* `https://www.googleapis.com/auth/bigquery` this scope grants Dekart the ability to manage user data in Google BigQuery, encompassing actions like running queries, managing datasets, and configuring settings.
25+
* `https://www.googleapis.com/auth/devstorage.read_write` this scope allows Dekart to read and write user data in Google Cloud Storage, enabling it to manage files and potentially other data storage elements.
26+
27+
These permissions are necessary for Dekart to run queries and store results in your Google Cloud Storage bucket.
28+
29+
### How will my data be used and protected?
30+
31+
SQL queries and their results are stored in Google Cloud Storage bucket *provided by you!* We never store tokens, and query results in Dekart Cloud backend. Nobody at Dekart can access your BigQuery data or Google Cloud Storage bucket.
32+
33+
### Can I revoke Dekart's access if I change my mind?
34+
35+
Yes, you can revoke Dekart's access to your Google Cloud resources by signing out of Dekart Cloud. This will remove Dekart's access to your Google Cloud resources and prevent Dekart from running queries or storing results in your Google Cloud Storage bucket.
36+
37+
### Does Dekart comply with data protection regulations?
38+
39+
We are committed to upholding the principles of GDPR and ensuring that your data rights are respected. We also comply with [Google API Services User Data Policy](https://cloud.google.com/terms/services) and verified by Google's Trust & Safety team.
40+
41+
### What support is available if I have issues or questions about data access?
42+
43+
If you have any questions or issues about data access, please contact us via email at [[email protected]](mailto:[email protected]) or via [Slack](https://slack.dekart.xyz/).

Diff for: content/legal/privacy.md

+30-32
Original file line numberDiff line numberDiff line change
@@ -9,27 +9,42 @@ images: []
99

1010
# Dekart Cloud Privacy Policy
1111

12-
Effective Date: 2024-02-21
12+
Effective Date: 2024-03-10
1313

14-
Welcome to Dekart Cloud. This Privacy Policy describes how Dekart XYZ UG (haftungsbeschränkt) ("Dekart Cloud," "we," "us," or "our") collects, uses, and shares information about you through our digital platforms and services. By accessing or using our services, you agree to the collection and use of information in accordance with this policy.
14+
This Privacy Policy outlines how Dekart XYZ UG (haftungsbeschränkt) (Dekart Cloud,” “we,” “us, or our”) manages your data in compliance with the General Data Protection Regulation (GDPR) and other relevant laws. By accessing or using our services, you acknowledge that you have read this policy and understand your rights.
1515

1616

17-
## Compliance with Google API Services User Data Policy
17+
## Information We Collect and Process
1818

19-
Our application's use and transfer to any other application of information received from Google APIs comply with the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy#additional_requirements_for_specific_api_scopes), including the Limited Use requirements. We ensure that the handling of data received through Google APIs is done with the utmost care and respect for your privacy and data security.
19+
Personal Information: We collect your email address solely for authorization, communication, and service delivery purposes. The lawful basis for processing this data is to fulfill our contractual obligations to you.
20+
Metadata: We gather metadata such as report names, data warehouse usage, and map configurations to enhance our services. This data is processed on the basis of legitimate interests in improving and personalizing our offerings.
21+
22+
Nobody at Dekart Cloud has access to your data and results of your queries.
2023

21-
## Information We Collect
24+
Payment Information: Payments are processed by our third-party provider, Stripe. We do not store payment details.
25+
Your Data Protection Rights
2226

23-
Personal Information: We collect your email address for authorization purposes and to communicate with you. We also collect metadata about the reports, data warehouse jobs (like id, bites processed), and map configurations and report names you create, including the names of the data warehouses used and bucket names. We do not store SQL queries, data caches, or access tokens.
27+
You have the right to access, rectify, erase, and port your data, and to restrict or object to its processing. You can withdraw consent at any time, where applicable. To exercise these rights, please contact us at [email protected].
2428

25-
Nobody at Dekart Cloud has access to your data or warehouse credentials.
29+
### Compliance with Google API Services User Data Policy
2630

27-
Payment Information: Payment processing is handled by our third-party service provider, Stripe. We do not store your payment data.
31+
Our application's use and transfer to any other application of information received from Google APIs comply with the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy#additional_requirements_for_specific_api_scopes), including the Limited Use requirements. We ensure that the handling of data received through Google APIs is done with the utmost care and respect for your privacy and data security.
2832

29-
## How We Collect Information
33+
### How We Collect Information
3034

3135
We collect information directly from you when you sign up via Google OAuth and when you use our services. Metadata is automatically generated by our backend systems hosted on Google Cloud and stored in a Cloud SQL database.
3236

37+
38+
## Security Measures
39+
40+
We employ robust security practices to protect your data, including encryption and restricted access. We commit to notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
41+
42+
Our infrastructure implements state-of-the-art security practices, including network security, credential storage, and two-factor authentication for data access.
43+
44+
## Data Sharing and Transfers
45+
46+
Your data is hosted within the EU and is not transferred internationally without adequate protections. We use third-party services that comply with GDPR and provide necessary safeguards.
47+
3348
## Use of Your Information
3449

3550
Your information is used to provide our services, communicate with you, and for marketing purposes. We strive to improve our offerings based on the data we collect.
@@ -38,40 +53,23 @@ Your information is used to provide our services, communicate with you, and for
3853

3954
Access to your information is limited to Dekart XYZ shareholders. We may share your information with third parties in compliance with legal obligations or to provide you with our services.
4055

41-
## Protection of Your Information
56+
## Retention of Data
4257

43-
We prioritize the security of your data. Our infrastructure on Google Cloud implements state-of-the-art security practices, including network security, credential storage, and two-factor authentication for data access.
44-
45-
## Your Rights
46-
47-
You have the right to access, correct, or request the deletion of your personal data. To exercise these rights, please contact us at [email protected]. We adhere to standard GDPR rights regarding personal data.
58+
Data is kept for as long as necessary to provide our services, and is securely deleted after one year of inactivity or upon your request, whichever comes first.
4859

4960
## Cookies and Tracking Technologies
5061

5162
Dekart Cloud does not use cookies or similar tracking technologies.
5263

53-
## Data Retention
54-
55-
Your information is retained for as long as necessary to provide our services. After the termination of services, data is deleted after one year or upon your request.
56-
5764
## Changes to This Privacy Policy
5865

5966
We reserve the right to update our Privacy Policy. Updates will be published on our website at this URL.
6067

61-
## Contact Information
62-
63-
For privacy-related inquiries, please contact [email protected].
64-
65-
## International Data Compliance
66-
67-
Dekart Cloud complies with international data protection laws, including GDPR and CCPA, as applicable to our operations as a Germany-based company.
68-
69-
## International Data Transfer
68+
## Commitment to Compliance
7069

71-
Data is hosted in the EU/Frankfurt. We use third-party services like Mailchimp, Gmail, and Slack for communication, ensuring compliance with international data protection standards.
70+
We are committed to upholding the principles of GDPR and ensuring that your data rights are respected.
7271

73-
## Third-Party Services
72+
## Contact Us
7473

75-
We integrate services such as Plausible Analytics and Google OAuth, which adhere to privacy standards affecting user data.
74+
For any questions about this policy or our privacy practices, contact our Data Protection Officer at [email protected].
7675

77-
This Privacy Policy provides a comprehensive overview of our data practices. For more detailed information or if you have questions, please contact us directly.

Diff for: layouts/index.html

+9-10
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
-moz-text-fill-color: transparent;
1313
">{{ .Title }}</h1>
1414
</div>
15-
<div class="col-lg-9 col-xl-8 text-center">
15+
<div class="col-lg-9 col-xl-9 text-center">
1616
<p class="lead">{{ .Params.lead | safeHTML }}</p>
1717
</div>
1818
<!-- <div class="center-block"><img class="mw-100" src="/images/screen.png" alt="Dekart Screenshot: Visualizing Chicago Crime Dataset Hosted on BigQuery"/></div> -->
@@ -60,7 +60,7 @@
6060
<div class="container">
6161
<div class="row justify-content-center">
6262
<div class="col-md-12 col-lg-10 col-xl-8">
63-
<h2 class="mt-3 text-center">What's New?</h2>
63+
<h2 class="mt-3 text-center">Blog</h2>
6464
{{ range (where .Site.RegularPages.ByDate "Section" "blog" ) -}}
6565
<div class="card">
6666
<div class="card-body">
@@ -113,19 +113,18 @@ <h2 class="h3 mt-0 mb-5 text-center">Connectors</h2>
113113
</section>
114114
<section class="section section-sm">
115115
<div class="container">
116-
<div class="row justify-content-center text-center">
116+
<div class="row justify-content-center text-left">
117117
<div class="col-lg-5">
118-
<h2 class="h4">GPU accelerated</h2>
119-
<p>State-of-the art WebGL-powered map visualizations and spatial analysis based on deck.gl</p>
118+
<h2 class="h4">Raw data insights</h2>
119+
<p>With WebGL rendering and advanced caching you don't need to worry much about data sampling and aggregation.</p>
120120
</div>
121121
<div class="col-lg-5">
122-
<h2 class="h4">For large query results</h2>
123-
<p>Tested at 100Mb and 1M rows.
124-
Efficient query result caching on Amazon S3 or Google Cloud Storage.</p>
122+
<h2 class="h4">Never talk to sales</h2>
123+
<p><a href="/docs/">Self-hosted</a> or <a href="/cloud/">Cloud</a>, you can start your analysis today without waiting and talking.</p>
125124
</div>
126125
<div class="col-lg-5">
127-
<h2 class="h4">SQL, CSV, GeoJSON</h2>
128-
<p>Side-by-side SQL editor and support for CSV and GeoJSON file uploads.</p>
126+
<h2 class="h4">Live collaboration</h2>
127+
<p>Easy to share Dekart maps updated live when multiple users are working together.</p>
129128
</div>
130129
</div>
131130
</div>

Diff for: layouts/partials/main/blog-meta.html

+2-1
Original file line numberDiff line numberDiff line change
@@ -1 +1,2 @@
1-
<p><small>Posted {{ .PublishDate.Format "January 2, 2006" }} by {{ if .Params.contributors -}}{{ range $index, $contributor := .Params.contributors }}{{ if gt $index 0 }} and {{ end }}<a class="stretched-link position-relative" href="{{ "/contributors/" | absURL }}{{ . | urlize }}/">{{ . }}</a>{{ end -}}{{ end -}}&nbsp;&hyphen;&nbsp;<strong>{{ .ReadingTime -}}&nbsp;min read</strong></small><p>
1+
<!-- <p><small>Posted {{ .PublishDate.Format "January 2, 2006" }} by {{ if .Params.contributors -}}{{ range $index, $contributor := .Params.contributors }}{{ if gt $index 0 }} and {{ end }}<a class="stretched-link position-relative" href="{{ "/contributors/" | absURL }}{{ . | urlize }}/">{{ . }}</a>{{ end -}}{{ end -}}&nbsp;&hyphen;&nbsp;<strong>{{ .ReadingTime -}}&nbsp;min read</strong></small><p> -->
2+
<p><small>by {{ if .Params.contributors -}}{{ range $index, $contributor := .Params.contributors }}{{ if gt $index 0 }} and {{ end }}<a class="stretched-link position-relative" href="{{ "/contributors/" | absURL }}{{ . | urlize }}/">{{ . }}</a>{{ end -}}{{ end -}}&nbsp;&hyphen;&nbsp;<strong>{{ .ReadingTime -}}&nbsp;min read</strong></small><p>

0 commit comments

Comments
 (0)