Security & Privacy

• Encrypted Connections: All data transmitted via HTTPS/TLS

• Secure Payments: Processed by Stripe (PCI-DSS Level 1)

• Password Protection: Bcrypt hashing with salt, enforced complexity requirements

• Database Security: Regular backups, access controls, Row-Level Security (RLS)

• File Storage: Secure cloud storage with access logging

• IP Privacy: All IP addresses are cryptographically hashed (SHA-256) before storage, compliant with GDPR pseudonymization requirements

• We collect only necessary information for service delivery

• We never sell your personal data to third parties

• IP addresses are hashed before storage - we cannot identify you from stored data

• You can download or delete your data anytime

• Cookies are used for functionality and analytics (optional)

• We comply with GDPR, CCPA, and other privacy regulations

• Read our full Privacy Policy for complete details

To maintain service quality and protect all users, we implement rate limiting on various actions. This prevents automated abuse, spam, and ensures fair resource allocation.

What is rate limiting?

Rate limiting restricts the number of requests you can make in a given time period. For example, you might be limited to 60 API requests per minute or 3 contact form submissions per hour.

What actions are rate limited?

• API requests (60 per minute)
• Contact form submissions (3 per hour)
• Product downloads (5 per hour per product)
• Product views (30 per hour per product)
• Account creation and login attempts

Your privacy is protected:

Rate limiting uses pseudonymized identifiers (cryptographically hashed IP addresses) to identify clients. We do not store your actual IP address. Hashed data is automatically deleted after 24 hours.

What if I hit a rate limit?

If you encounter a "Rate limit exceeded" error, simply wait a few minutes and try again. The error message will tell you how long to wait. If you believe you've encountered this error in error, please contact support.

We are committed to protecting your data rights under GDPR (General Data Protection Regulation) and similar privacy laws. You have the following rights:

• Right to Access: Download all your personal data in a machine-readable format from your account settings.
• Right to Rectification: Update your personal information directly in your account settings.
• Right to Erasure: Delete your account and all associated data permanently.
• Right to Object: Manage cookie preferences and email notifications in your settings.
• Right to Data Portability: Export your data for use elsewhere.

For more information about your data protection rights, see our Privacy Policy.