Security

Our frontend is hosted on Vercel and our backend on Railway. Our database and authentication run on Supabase (PostgreSQL). All traffic between your browser and our services is encrypted in transit using TLS.

We use Supabase Row Level Security (RLS) to scope database access to the authenticated user, with limited, audited server-side exceptions where an administrative operation genuinely requires broader access. Data at rest in our database is encrypted using our provider’s standard encryption. Your responsibilities for keeping your account secure, including acceptable use of the Service, are set out in our Terms of Service.

Payments are handled entirely by Lemon Squeezy, our merchant of record. We never receive or store your full card number — Lemon Squeezy is responsible for PCI-DSS compliant handling of payment data.

Messages sent to the AI Trainer and SQL queries submitted for evaluation are sent to OpenAI’s API to generate responses. See our Privacy Policy for details on this processing.

We do not currently hold SOC 2, ISO 27001, or similar third-party security certifications. If that changes, this page will be updated.

If a data breach occurs that affects your personal information, we will notify affected users and, where required, relevant regulators without undue delay, as described in our Privacy Policy.

If your organization requires a signed Data Processing Agreement (DPA) before purchase, contact us at [email protected] and we will provide one.

If you believe you’ve found a security vulnerability in DataBiz Academy, please report it to [email protected]. Please do not publicly disclose the issue until we’ve had a reasonable opportunity to investigate and address it.