Security
Last updated July 9, 2026
Data encryption
All traffic to ColdMailCalculator uses TLS encryption. Sensitive data such as passwords are hashed and never stored in plain text. API keys are stored as secure hashes and shown once at creation time.
Authentication
User accounts are managed through Supabase Auth with secure session handling. Passwords require a minimum length of 8 characters.
Payment security
All payments are processed through Stripe. ColdMailCalculator does not store or process full credit card numbers. Subscription management and billing information are handled entirely within Stripe's PCI-compliant infrastructure.
Data access
Row-level security is enforced at the database level to ensure users can only access their own workspace data. Service role access is restricted to server-side operations.
Reporting vulnerabilities
To report a security concern, contact support@coldmailcalculator.com. We aim to acknowledge reports within 48 hours.