Account Security

• Passwords are encrypted using industry-standard hashing and are never stored in plain text.
• We recommend using a strong, unique password for your account.
• Enable two-factor authentication if available for an extra layer of protection.
• Never share your login credentials with anyone.

Data Encryption

All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). Sensitive data such as passwords and payment information is encrypted at rest.

Access Controls

Access to user data is restricted to authorized personnel who need it to operate the platform. Administrative access is logged and monitored. We enforce the principle of least privilege.

Payment Security

Payment processing is handled by Stripe, a PCI-DSS compliant payment provider. We never store your full credit card details on our servers. All payment data is transmitted directly to Stripe over encrypted channels.

Incident Response

We maintain an incident response plan to address security breaches. In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

Reporting Vulnerabilities

If you discover a security vulnerability, please report it responsibly. Do not publicly disclose vulnerabilities. Contact us with details so we can investigate and address the issue promptly.