Security Policy

1. Our Commitment

We take reasonable technical and organizational measures to protect data on the Platform, appropriate to the sensitivity of what we hold (business identity, contact details — we never store payment card details ourselves).

2. Payment Security

All payments are processed by Cashfree, a PCI-DSS compliant payment gateway. SuperPrinters never sees or stores your full card, UPI, or net-banking credentials.

3. Identity Verification

GST/PAN verification is performed via Cashfree's Secure ID service using encrypted (RSA-OAEP) request signing — we do not independently store or re-verify these numbers outside this flow.

4. Access Controls

Administrative access to user data is restricted to a small, named set of authorized personnel, gated by authentication and role checks. Every money-adjacent operation (wallet, credits, invoicing) uses atomic, race-safe database operations to prevent double-processing.

5. Encryption

Data in transit is encrypted via HTTPS/TLS. Data at rest is encrypted by our infrastructure providers (Supabase/Vercel/Railway) per their own published security standards.

6. Reporting a Vulnerability

If you believe you've found a security vulnerability, please report it responsibly to founder@superprinters.in rather than disclosing it publicly. We'll acknowledge reports and keep you updated as we investigate.

7. Your Responsibilities

Keep your password confidential, use a strong/unique password, and notify us immediately if you suspect unauthorized access to your account.