Security Policy

IMAGINE (hereinafter "the Service") prioritizes the information security of our users and implements appropriate technical and organizational measures.

• Google OAuth 2.0 Authentication: We use secure Google account authentication and do not store passwords on the Service.
• Row Level Security (RLS): Access control is implemented at the database level, ensuring users can only access their own data.
• Session Management: Secure session tokens prevent unauthorized access.

The Service uses Stripe for payment processing. Credit card information does not pass through the Service's servers and is processed directly by Stripe, which is PCI DSS (Payment Card Industry Data Security Standard) compliant.

• Credit card numbers are not stored or retained by the Service
• Stripe holds PCI DSS Level 1 certification, an international security standard

To prevent data loss, regular automatic backups are performed by Supabase (database and storage provider).

In the unlikely event of a security incident, we will take the following actions:

• Promptly identify the cause and prevent further damage
• Notify affected users
• Report to relevant authorities as necessary
• Implement measures to prevent recurrence

To maintain security, please cooperate with the following:

• Do not share login information with third parties
• Always log out after using shared devices
• Promptly contact us if you discover suspicious activity

For security-related questions or reports, please contact us via the contact pageor at contact@whatif-ep.xyz.