Security & Data Protection

Effective / Last Updated: September 11, 2026

AIgoesON treats decision intelligence, evidence lineage, account information, and user-provided inputs as information requiring appropriate safeguards.

Authentication and Sessions

Authentication and session management may be provided through supported identity providers and secure session infrastructure, including Supabase-managed services where applicable.

Users are responsible for protecting their credentials, recovery methods, devices, and active sessions.

Payment Security

Payment-card processing is handled through our designated payment processor, including Stripe, Inc., rather than through direct storage of raw card data by AIgoesON wherever the applicable payment flow permits.

AIgoesON does not intentionally store raw card numbers used to complete transactions through the payment processor.

Cloud and Application Infrastructure

AIgoesON uses Vercel, Inc. for cloud infrastructure and global application hosting and Supabase, Inc. for applicable authentication/session and database services.

Data Isolation

We use logical access controls and appropriate technical safeguards designed to restrict access to user data to authorized systems, personnel, and service providers with a legitimate operational need.

AI Processing Boundary

User-provided decision data is not intended to become publicly available merely because it is processed through AIgoesON.

Because the Services depend on external infrastructure and AI/web retrieval providers, no statement of absolute isolation should be interpreted beyond the actual technical architecture, applicable contracts, and documented security controls.

Security Incidents

Where required by applicable law, AIgoesON will respond to personal-data and security incidents and provide legally required notifications.

Responsible Disclosure

Security researchers who identify a potential vulnerability are encouraged to report it responsibly to: Live@AIgoesON.com

Please include sufficient technical detail to allow investigation. Please do not publicly disclose a suspected vulnerability before allowing reasonable time for investigation and remediation.