Every database query is scoped to your workspace, and PostgreSQL row-level security policies back that scoping at the database layer. Public API requests are bound to the workspace that owns the key.
JWT sessions with secure cookie storage. Optional multi-factor authentication (MFA) with TOTP and backup codes. Session invalidation across all devices. Password hashing with bcrypt.
Scoped API keys with rotation support. Per-endpoint rate limiting with cost multipliers. HMAC-signed webhook payloads with exponential retry on delivery failure.
Google Sheets and analytics connections use OAuth 2.0. LiquiChart only reads the specific resources you authorize. Disconnect any integration at any time from your settings.
Download a machine-readable export of your data at any time from Settings. Delete your account from Settings, with a 30-day recovery window before permanent deletion. Poll vote anonymization on request. PII filtered from application logs. Removal request processing with proper data anonymization.
HTTPS on all endpoints. Deployed on Vercel's edge network with automatic SSL. Environment secrets encrypted at rest. Circuit breakers on external service calls prevent cascade failures.
Questions about security or compliance? Reach out and we will provide details specific to your requirements.