Security & Data Protection

We take the security of your account and your content seriously. This page describes the practices we use to protect your data. Security is never "done," and we continue to improve these measures over time.

Encryption in transit

All traffic between your browser and Digestify is encrypted using industry-standard TLS (HTTPS). Data moving between our services and the providers we rely on is likewise encrypted in transit.

Authentication and passwords

• Passwords are never stored in plain text. We store only a salted, securely hashed version using a modern password-hashing algorithm.
• Sessions are managed with signed, secure tokens.
• We encourage you to use a strong, unique password for your account.

Data storage

Your account information and content are stored in a managed database with access restricted to the systems that need it. We limit internal access to production data to what is necessary to operate and support the service.

Payment security

Payments are handled by Stripe, a PCI-DSS Level 1 certified payment processor. We do not store your full payment card details on our servers.

AI processing

Content you submit for summarization is transmitted securely to our AI provider (Anthropic) solely to generate your digest. We recommend avoiding highly sensitive personal data in source material. See Understanding AI Digests for more on how processing works.

Subprocessors

We rely on a small set of reputable providers, each handling data only as needed:

• Anthropic — AI summarization.
• Stripe — payment processing.
• Hosting and database providers — application hosting and data storage.

Your controls

• Export. You can download your data from within the app at any time.
• Deletion. You can delete individual digests, and request full account deletion by contacting us.
• Least data. We collect only what we need to run the service. See our Privacy Policy for details.

Responsible disclosure

If you believe you've found a security vulnerability, we appreciate a responsible report and will work to address it promptly. Please email us with details at milesschwartz13@gmail.com. Please don't publicly disclose an issue until we've had a reasonable chance to fix it.

Contact

Security questions or concerns? Reach us at milesschwartz13@gmail.com.