Security

How we protect accounts, saved workspaces, and Premium billing metadata. Last updated: April 6, 2026.

Encryption

We use HTTPS to protect data in transit between your browser and our servers and vendors.

Authentication & access control

  • Authentication is handled via Supabase Auth.
  • Database access is protected with Row Level Security (RLS) so users can access only their own rows.
  • Server-only secrets are kept on the server; the client uses a public anon key scoped to the project.

Payment security (Razorpay)

Payments are processed by Razorpay. We do not store card/UPI credentials. We verify Razorpay signatures server-side before enabling Premium access.

Vulnerability disclosure

If you believe you’ve found a security issue, please email sriram.venkatachalam@vyzifytech.com with details. Please avoid public disclosure until we have a reasonable chance to investigate and fix.