🔐 Dialed Macros – Security Policy

1.Authentication & Access Control

• We use Supabase Auth to manage secure user authentication and session handling.
• OAuth support (Google, Apple) enables secure and password-less login.
• All passwords are securely hashed and never stored in plain text.
• Access to internal systems is limited to authorized personnel via role-based access controls (RBAC).

2.Data Encryption

• In transit: All traffic between your browser and our servers is encrypted using HTTPS/TLS.
• At rest: User data is encrypted within Supabase, using industry-standard AES encryption.

3.Secure Payment Processing

• We do not store credit card details. All billing is securely handled through Stripe, which is PCI-DSS Level 1 compliant.
• Stripe securely tokenizes and encrypts all payment information.

4.Email Security

• Transactional emails (e.g., signup, confirmation, password resets) are delivered through PrivateEmail by Namecheap, which supports TLS for secure email delivery.
• We do not use email for sensitive data transmission (e.g., passwords or tokens in plain text).

5.Application Security

• Our application stack is built using Next.js, Supabase, and Vercel — services with robust built-in security and scalability.
• Regular dependency checks and updates are conducted to patch known vulnerabilities (e.g., using Dependabot).
• Input validation and sanitization help protect against XSS, CSRF, and injection attacks.

6.Infrastructure & Hosting

• Dialed Macros is hosted on Vercel, which offers DDoS protection, automatic HTTPS, and scalable deployments.
• Back-end data and API services are hosted via Supabase, which offers database-level security and auditing.

7.Incident Response

In the event of a data breach or security incident, we will:

• Investigate and contain the issue promptly
• Notify affected users as required by law
• Document findings and improve defenses accordingly

8.User Responsibilities

• You are responsible for keeping your login credentials secure.
• Please report any suspicious activity or vulnerabilities to support@dialedmacros.com

9.Changes to This Policy

We may update this Security Policy from time to time. Any updates will be reflected on this page with a revised effective date.

10.Contact

For questions or security-related concerns, email us at: