01 / ACCESS
Role-based access, unique user accounts and restricted administrative access.
Security built around sensible boundaries.
We use administrative, technical and organisational safeguards appropriate to a hosted business-software service.
SECURITY PRACTICES
Reduce access. Protect transit. Keep records.
No system is perfectly secure. Our approach is to limit the data and access we hold, use established service providers, and maintain practical detection and response procedures.
02 / TRANSIT
HTTPS/TLS encryption for data sent between supported browsers and the service.
03 / PAYMENT
Checkout payment credentials are collected by the authorised payment provider, not our servers.
04 / BACKUPS
Routine backups and recovery procedures appropriate to the hosted service.
05 / MONITORING
Service and access logging used for reliability, abuse prevention and investigation.
06 / VENDORS
Service providers receive only the access reasonably needed for their function.
PAYMENT SECURITY
We do not ask for payment credentials by email.
Never send us a full card number, CVV, UPI PIN, online-banking password or one-time passcode. The payment provider displayed at checkout collects and protects that information under its own security programme.
RESPONSIBLE DISCLOSURE
Report a suspected vulnerability privately.
Email security@infinitysolutions.app with reproducible steps, the affected URL, impact and any evidence. Do not access other people’s data, disrupt the service, use automated high-volume testing, demand payment, or disclose an unremediated issue publicly. We aim to acknowledge credible reports within 3 business days.