SECURITY

We keep the practices below in place to protect data on 3134studios.com and the client portal. This page describes our general approach; it isn't a guarantee that any system is immune to compromise.

Encryption

All traffic to the Site is served over HTTPS/TLS. Data at rest in our database is encrypted by our hosting provider, Supabase.

Account Security

Client portal passwords are hashed and managed by Supabase Auth — we never see or store your raw password. Access to your quotes and invoices is restricted to your account through row-level security policies enforced at the database level.

Payments

Payments are handled entirely by Stripe, a PCI-DSS Level 1 certified payment processor. Card numbers and payment details are sent directly to Stripe and never pass through or get stored on our servers.

Access Control

Administrative access to client data, quotes, and invoices is limited to authorized 3134 Studios staff and is not accessible through the public Site.

Reporting a Vulnerability

If you believe you've found a security issue affecting this Site, please email us at thirtyone34.studios@outlook.com with details. We ask that you give us a reasonable opportunity to investigate and address any issue before disclosing it publicly.