Trust

Security & Data Handling

This page is maintained by Crimson Strande to answer common security and privacy questions about crimsonstrande.app. It describes controls we have enabled today, not a third-party certification.

Authentication

Verified accounts

Email + password with server-side leaked-password checks, Google sign-in, per-role access (customer vs. staff), and email alerts on new sign-ins. Staff registration requires a private invite code.

Authorization

Row-level security

Every application table has row-level security enabled. Customers can only read and update their own records; staff access is scoped through a dedicated roles table with a security-definer check function.

Transport

TLS everywhere

All traffic is served over HTTPS. Cookies used for authentication are HTTP-only and secure. Public API endpoints validate every input with strict schemas.

Storage

Scoped file uploads

Ticket attachments live in a private bucket with per-user path prefixes; signed URLs expire. Only staff and the owning customer can read or modify their files.

Abuse prevention

Rate limits & honeypot

Public submission endpoints enforce per-email hourly rate limits and a honeypot field to block automated abuse without adding friction for real users.

Audit

Privileged action log

Staff actions that change tickets, invoices, or account state are recorded in an audit log readable only by staff. Deletion, quote issue, payment verification, and role changes are all captured.

Your rights

Data portability & deletion

Signed-in customers can download a JSON export of their profile, tickets, invoices, and consent history at any time, and can request account deletion. Requests are soft-deleted immediately and hard-purged after 30 days, with invoice records retained for the period required by Nigerian tax law.

Manage in your account

Subprocessors

Who we work with

We use a small set of trusted subprocessors to deliver the Service. Categories today:

  • Cloud hosting & edge networkServes the app and API globally with TLS termination and DDoS protection.
  • Managed database & authenticationStores account data, tickets, invoices; issues auth sessions.
  • Object storageHolds ticket attachments and payment-proof uploads.
  • Transactional emailSends booking, quote, payment, scheduling, and completion emails from our domain.

Named provider entities are available on request from privacy@crimsonstrande.com for corporate customers under NDA.

Responsible disclosure

Report a vulnerability

Email security@crimsonstrande.com with steps to reproduce. We aim to acknowledge within 2 business days and to remediate confirmed high-severity issues within 30 days. Please do not test rate limits, exfiltrate data, or degrade service.

This page is app-owned editable content and is not an independent audit or certification.