Security is fundamental to how we operate FWDH AI Studio. This statement summarizes the technical and organizational measures we use to protect your data.
All traffic between your browser and the Service is encrypted in transit using TLS. Stored data is encrypted at rest by our hosting provider, and connected-account tokens receive an additional layer of application-level encryption (AES-256-GCM).
We support secure email/password authentication and single sign-on via trusted identity providers. Passwords are hashed using strong, salted, one-way algorithms and are never stored in plain text.
Payments are processed by PCI-DSS compliant third-party payment providers. FWDH AI Studio does not store your full credit card details on our servers.
Administrative access is role-based and limited to authorized personnel on a need-to-know basis. Privileged admin changes require two-factor verification, admin sessions expire automatically, and administrative actions are recorded in an audit log. Connected-account tokens and API secrets are never visible to staff.
Our hosting and infrastructure providers operate network-level protection and patch the managed infrastructure. We review application logs and admin activity, run automated security checks on our database configuration and software dependencies, and fix identified vulnerabilities according to their severity.
If you discover a security vulnerability, please report it responsibly to fwdhaistudio.support@gmail.com. Do not publicly disclose the issue until we have had a reasonable opportunity to investigate and remediate.
This document is provided for general informational purposes and does not constitute legal advice. For questions, contact fwdhaistudio.support@gmail.com.