Data Security

At Cormak AI, we take the protection of our users' personal and business information seriously. The platform is built using advanced cloud technologies and security standards.

Infrastructure Security

User accounts and project data are hosted on Supabase (PostgreSQL), while HTML publishing uses Cloudflare infrastructure. Domains and HTTPS require separate setup; confirm their readiness before public launch.

Secrets & Integration Storage

Integration secrets must not appear in public HTML or client logs. Server functions verify authorization and project ownership before sensitive operations. Users should regularly revoke unused tokens and grant connectors only the permissions they need.

Payment Security

We do not store full card data on our own servers. Web subscriptions and credit packs are processed by Dodo Payments as merchant of record. This reduces payment-processing risk, though no service can guarantee absolute security.