Security

1. Our approach to security

Fovea is built to hold the most sensitive parts of a photography business — client galleries, messages, bookings, and payments — so security is a first-class concern, not an afterthought. We use a layered set of safeguards designed to protect your information at every stage, and we partner with established providers (Supabase and Stripe) for the parts of the stack where it matters most.

2. How we protect your information

• Encryption in transit. Connections to the Service are protected with industry-standard TLS encryption.
• Row-level security (RLS). Our database enforces row-level security policies so that each user — and each studio's tenant — can only access the records they are authorized to see.
• No card data on our systems. Card numbers are handled entirely by Stripe; we never store full payment-card numbers. We keep only Stripe references that let us reconcile a payment.
• Private photo storage with signed links. Photos and files are kept in private storage buckets and delivered through short-lived, signed URLs rather than public links, so galleries are not exposed to the open internet.

3. Payment security

All payments and studio payouts are processed by Stripe and Stripe Connect, a PCI-compliant payment processor. Card details are collected and stored directly by Stripe and never touch Fovea's systems. We store only the Stripe identifiers needed to reconcile a transaction.

4. Your part in keeping data safe

No method of transmission over the internet or method of electronic storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security. Please help us by keeping your password confidential and notifying us promptly of any suspected unauthorized access. For more detail on what we collect and how we share it, see our Privacy Policy.

5. Reporting a security concern

If you believe you have found a security vulnerability or have a concern about the security of your account or data, please contact us at privacy@fovea.pro so we can investigate promptly.