Trust
Security at GrowthGiant.
This page is maintained by Qamy Soft Solutions (Reg No. BN688240626) to answer common security and privacy questions about GrowthGiant. It describes controls we have enabled today; it is not a certification.
Encryption in transit
All traffic to growthgiant.live is served over TLS 1.3 with HSTS. Managed certificates are issued and rotated automatically by our hosting layer.
Encryption at rest
Application data is stored in a managed Postgres database with disk-level encryption. Backups inherit the same encryption.
Row-level security
Every user-scoped table enforces row-level security so tenants can only read and write their own data. Server functions run under the authenticated user's identity by default.
Secrets & OAuth tokens
Third-party OAuth tokens are isolated in a service-role-only table. Application code never sees other tenants' tokens, and secrets are stored in the platform secret manager — not in source control.
Authentication
Password sign-in uses have-I-been-pwned leak detection. Anonymous sign-ups are disabled. Password reset uses single-use signed links.
AI guardrails
AI calls flow through a hardened gateway with input sanitization, prompt-injection filters, secret redaction, and per-tier rate limits.
Subprocessors
We use the following categories of subprocessors to operate the service: managed database and auth (Supabase), managed hosting and edge (Lovable / Cloudflare Workers), AI model routing (Lovable AI gateway), email delivery for transactional and auth emails, and payment processing. A current, itemized subprocessor list is available on request from qamysoftsolutions@gmail.com.
Shared responsibility
We secure the platform, hosting, database, and application. Customers are responsible for protecting their account credentials, managing team access, honoring their own users' consent, and complying with applicable law when using GrowthGiant to reach contacts.
Reporting a vulnerability
If you believe you have found a security issue, please email qamysoftsolutions@gmail.com with steps to reproduce. Do not perform testing that would degrade service or access data you do not own. We will acknowledge within 2 business days.
Compliance
GrowthGiant is not currently SOC 2, ISO 27001, HIPAA, or PCI certified. Payments are processed by a PCI-compliant payment provider; we do not store card numbers. For data subject requests under GDPR or similar laws, contact us at the address above.