Security & Privacy
We believe your data belongs to you. Here is exactly how we protect it.
Encryption Standards
We use industry-standard encryption for all your data.
- At Rest: Sensitive data (emails, names, messages) is encrypted using AES-128 (Fernet) before storage.
- In Transit: All data transmission is secured via TLS 1.3.
- Backup: Database backups are encrypted with AES-256-CBC.
Audit Logging
Transparency is key to trust. We verify this by logging every significant action.
- Comprehensive: All authentication events (login, logout) and API requests are logged.
- Exportable: You can export your full audit logs at any time from the Settings panel.
- Privacy-Aware: Logs are sanitized to strip sensitive query parameters and tokens.
Data Handling
We minimize data exposure while providing powerful AI features.
AI Processing Transparency
To provide AI capabilities, we send conversation context to trusted third-party providers (Google Gemini, OpenRouter). We do not use your data to train their models.