Security & Data Protection

All data transmitted between your browser and Rylaa servers is encrypted using HTTPS (TLS), provided by Vercel. This ensures that your information, including login credentials and usage data, is protected from interception during transit.

User passwords are securely hashed using bcrypt before storage. Plain-text passwords are never stored. This means that even in the unlikely event of a data breach, your passwords remain protected.

Access to personal data is strictly limited. Currently, only the founder of Rylaa can access raw user data for service maintenance, support, or legal purposes.

No third-party, employee, or contractor has unauthorized access to your personal data.

We perform regular backups of all critical data to prevent loss due to technical failures. Backup copies are stored securely and encrypted.

User data is retained as long as the account is active. Upon account deletion, all associated data is permanently removed from our systems.

Rylaa uses trusted third-party services such as Vercel, Supabase, and email providers for hosting, database, and communications. These providers only access data necessary to provide their services and are contractually required to protect your data.

We monitor our systems for suspicious activity or security incidents. In case of any breach or vulnerability, we will:

• Investigate and contain the incident as quickly as possible
• Notify affected users if personal data may have been compromised
• Implement additional safeguards to prevent recurrence

Rylaa is committed to protecting your privacy and personal data. We adhere to GDPR principles and industry-standard security practices to ensure that your data remains confidential, secure, and available only for legitimate purposes.