Data security & privacy

We take security seriously. Here's how your data is protected:

Encryption:

• All data encrypted in transit (TLS 1.3)
• Sensitive data encrypted at rest with AES-256-GCM
• API keys and credentials are encrypted before storage

Access control:

• Row-level security (RLS) ensures you only see your own data
• Application-layer tenant isolation with validated access checks
• Session-based authentication via Clerk

Infrastructure:

• Hosted on Vercel (frontend) and Railway (workers) with SOC 2 compliant providers
• PostgreSQL database with automated backups on Supabase
• Redis for rate limiting and caching on Upstash

Your rights:

• Export your data at any time from account settings
• Request full data deletion by contacting support
• We never sell your data to third parties

For full details, see our Privacy Policy and Security pages.