Security Policy

Security is a top priority at CelebXchange. We implement layered security controls to protect user data, prevent unauthorized access, and ensure the integrity and availability of our platform.

• Encryption in transit: All traffic is served over HTTPS/TLS.
• Encryption at rest: Sensitive data is encrypted in our databases.
• Password security: Passwords are hashed using strong, salted algorithms (e.g., bcrypt/argon2).
• Token security: Authentication tokens are short-lived and signed with a secret key.

Access to user data is restricted to authorized personnel on a need-to-know basis. Role-based access control (RBAC) governs what each user can see and do. We enforce least-privilege principles across our systems.

We support secure authentication including social login (Google, Instagram) and email/password. Sessions are tracked and can be revoked from your Security settings. We recommend enabling strong, unique passwords and keeping your credentials private.

We regularly review our code and infrastructure for vulnerabilities, apply security patches promptly, and conduct security testing. We follow secure coding practices and dependency management to minimize risk.

In the event of a security incident, we will investigate promptly, mitigate impact, and notify affected users and relevant authorities as required by law. We maintain logs to support detection and response.

If you discover a security vulnerability, please report it responsibly to security@celebxchange.com. Please do not exploit the vulnerability or access data beyond what is necessary to demonstrate the issue. We appreciate responsible disclosure.