Security at Affiqly
Security is foundational to the product. Here's a plain-language summary of what we do to protect your account and your creators' storefronts.
Encryption in transit
All connections use TLS 1.2+. Passwords are hashed and never stored in plaintext.
Least-privilege access
Row-level security on every table. API keys are hashed at rest and can be rotated at any time.
Backups & recovery
Daily automated backups with point-in-time recovery on our managed database.
Audit logging
Sensitive admin actions are recorded in an immutable audit log with actor and timestamp.
Responsible disclosure
Found a vulnerability? Please report it privately to hello@affiqly.com. We acknowledge reports within 48 hours and credit researchers who follow good-faith disclosure.
- Do not access data belonging to others.
- Do not run automated scans that degrade service.
- Give us reasonable time to remediate before public disclosure.