Security
How we protect your data.
Data Encryption
All data transmitted between your browser and our servers is encrypted using TLS 1.3. Documents uploaded for processing are encrypted at rest using AES-256.
Authentication
Session management uses HTTP-only cookies with secure flags. Passwords are hashed using bcrypt. We support email/password and Google OAuth for authentication.
Data Retention
Source documents and generated content are retained as long as your account is active. Upon account deletion, all associated data is permanently removed within 30 days.
Infrastructure
Our application runs on isolated virtual private servers. Database access is restricted to authorized IPs only. Regular security patches are applied automatically.
AI Processing
AI generation requests are sent to our LLM provider via encrypted API calls. We do not share your documents or generated content beyond what is necessary to process your request. No customer data is used for model training.