Security

We continuously improve controls for account protection, billing safety, and platform reliability.

Current controls

• Secure password hashing
• Signed session cookies
• Stripe-hosted billing and subscription processing
• Usage metering and plan enforcement

Operational practices

• Least-privilege access approach
• Separation of app and payment systems
• Planned hardening: managed DB, secure secrets, audit logs

Report issues

Email gavellmathew@gmail.com.