Security

Infrastructure

Rhyora runs on industry-leading cloud infrastructure designed for security and reliability:

• Hosting: A globally distributed edge network with automatic DDoS protection.
• Database & Auth: Managed, access-controlled data storage with row-level security policies and built-in authentication.
• Content delivery: A global CDN with isolated, sandboxed workloads for media processing.
• Asset storage: Access-controlled object storage for generated media.

Encryption

• In transit: All connections are encrypted using modern protocols (HTTPS/TLS). HTTP requests are automatically redirected to HTTPS.
• At rest: Databases and stored assets are encrypted at rest with strong, industry-standard encryption.

Authentication

• Password hashing: User passwords are hashed with bcrypt before storage.
• Session management: Secure, HttpOnly session cookies with automatic token rotation.
• Access control: Role-based access control (RBAC) enforced at both application and database layers.

AI Data Handling

• Prompt processing: Your prompts and creative inputs are sent to AI providers solely to generate the requested content. They are not used for model training.
• Content safety: Generated content passes through safety screening to prevent policy-violating outputs.
• Provider isolation: Each AI provider receives only the minimum data required for the specific generation task.

Payment Security

Payment processing is handled by Razorpay, a PCI-DSS compliant payment gateway. Rhyora does not store credit card numbers, CVVs, or other sensitive payment details on our servers.

Responsible Disclosure

If you discover a security vulnerability, please report it to support@rhyora.com. We ask that you give us reasonable time to investigate and address the vulnerability before disclosing it publicly.

Related

• Privacy Policy
• Terms of Service
• Contact Us