Data Security Policy

How we protect and secure your marketing data with enterprise-grade security measures.

Last Updated: October 9, 2026

Security Overview

Our Security Commitment

Your marketing data is protected by enterprise-grade security measures. We use industry-leading practices to ensure your information stays safe and private.

Data Encryption

  • • In Transit: TLS 1.3 encryption (verified)
  • • At Rest: PostgreSQL database encryption
  • • API Security: HTTPS-only communication
  • • Data Storage: Encrypted database connections

Infrastructure Security

  • • Hosting: Dedicated server infrastructure
  • • Database: PostgreSQL with encrypted storage
  • • Network: Firewall protection and secure connections
  • • Monitoring: System monitoring and security updates

Access Controls

Authentication

✅ Currently Implemented

  • • JWT token-based authentication
  • • Secure password hashing (bcrypt)
  • • Session management and timeout (24 hours)
  • • Secure cookie implementation (httpOnly, secure)

Authorization

✅ Currently Implemented

  • • Brand-based access control
  • • User-brand relationship validation
  • • Data segregation between accounts
  • • Basic access logging