Security
How we protect accounts, saved workspaces, and Premium billing metadata. Last updated: April 6, 2026.
Encryption
We use HTTPS to protect data in transit between your browser and our servers and vendors.
Authentication & access control
- Authentication is handled via Supabase Auth.
- Database access is protected with Row Level Security (RLS) so users can access only their own rows.
- Server-only secrets are kept on the server; the client uses a public anon key scoped to the project.
Payment security (Razorpay)
Payments are processed by Razorpay. We do not store card/UPI credentials. We verify Razorpay signatures server-side before enabling Premium access.
Vulnerability disclosure
If you believe you’ve found a security issue, please email sriram.venkatachalam@vyzifytech.com with details. Please avoid public disclosure until we have a reasonable chance to investigate and fix.