Security & Data Practices

Plain-language description of the security and data practices actually implemented on VIPUConnect.

This document is a current working version maintained by VIPUConnect. It is not attorney-approved. Binding provisions require review by qualified counsel before broad production reliance.

VIPUConnect uses reasonable administrative, technical, and organizational safeguards designed to protect information appropriate to each feature. This page describes what is actually implemented today. VIPUConnect does not promise that the Services will be completely secure or breach-proof.

Role-based access controls are used where implemented. Fans, hosts, and founders see different surfaces and different data. Administrative functionality is scoped to founder or platform administrators.

All legal documents

Overview

Access controls

Row-level security (RLS)

Server-side authorization

Private storage

Audit logging

Command allowlists and founder approval

Replay and duplicate protection

Separation of credentials

Responsible disclosure