Encryption everywhere
All data is encrypted in transit and at rest. API keys are stored in Vercel and never exposed to the client.
Security
Your data stays yours.
Marketing Commander is built with security and privacy at every layer.
Row-level security
Supabase RLS ensures every database query is scoped to the authenticated user.
No training on your data
AI provider API calls are not used to train models. Your campaigns and content remain yours.
Approval-first architecture
Lumen recommends; you approve. Nothing is published, sent, or charged without your explicit action.
Session-bound access
Web sessions use HttpOnly, Secure, SameSite cookies with short-lived tokens.
Third-party minimisation
We use only trusted infrastructure providers: Vercel, Supabase, Stripe, Upstash, OpenAI, and Groq.