This page is maintained by Zofloq to answer common security and privacy questions about the platform.
Zofloq uses managed authentication with email/password and Google sign-in. Sessions are protected with modern token-based auth and can be revoked from your account page.
Your account data — profile, ICP context, generated outputs — is protected with row-level security so that only you can read and modify it from the client. Server-side operations use scoped privileges.
Zofloq is hosted on managed cloud infrastructure with encryption in transit. We rely on the platform's built-in controls; Zofloq itself is the responsible operator for how features are configured and how your data is handled inside the product.
If you believe you've found a security issue, contact us and we'll respond quickly. Please provide enough detail to reproduce the issue without exposing user data.
This page describes practices, not certifications. Nothing here should be read as a legal warranty or compliance claim.