Security

Security is foundational to how we build Arqina. This page describes, at a high level, the measures we take to protect your account, your content, and your payments. It complements our Privacy Policy.

Encryption

Data is encrypted in transit using TLS, and the data we store is encrypted at rest by our infrastructure providers. Your renders and account data are transmitted over secure connections.

Authentication and Access

Accounts are protected through a managed authentication system. Passwords are stored only as salted hashes, never in plain text, and you can sign in with a supported identity provider instead of a password. Access to production systems is limited to the people who need it, following least-privilege principles.

Your Content

The images you upload and the renders we generate are stored privately and are accessible only to your account. You can delete renders at any time from your dashboard, and you can request deletion of your account and associated data as described in our Privacy Policy.

Payments

Payments are processed by a PCI-compliant payment provider. Card details are handled directly by that provider, Arqina never receives or stores full card numbers.

Infrastructure

We build on established cloud infrastructure providers and apply security updates and configuration hardening as part of our operations. No system is perfectly secure, so we continuously work to reduce risk and to respond quickly when issues arise.

Reporting a Vulnerability

If you believe you have found a security vulnerability, we want to hear from you. Please email [email protected]with the details and steps to reproduce. We ask that you give us a reasonable opportunity to investigate and address the issue before disclosing it publicly, and that you avoid accessing or modifying other users’ data. We will acknowledge your report and keep you informed of our progress.

Contact

Security questions and reports go to [email protected].