Security and Data Handling

This launch draft requires owner approval before public outreach. Missing legal-entity, controller, retention, cookie, and security facts are intentionally not guessed.

The application keeps database and payment-provider work on server-side route handlers, uses the installed authentication system for protected account routes, and routes email through the Polsia-managed email proxy. These implementation facts are not a certification or guarantee.

Before launch, the owner must confirm hosting and processor details, access-control review, backup and deletion practice, incident response, vulnerability-reporting contact, encryption wording, and any security commitments made to customers.

Security questions can be sent to proofcairn-0olmzc@polsia.app.