Trust
Security & Trust
How Everhelm Studios protects your data, your connected platforms, and your business — and the practices we follow every day.
Last updated: June 28, 2026
Our Commitment
Your business runs on trust, and so do we. Everhelm Studios is built to keep your data private, your connected accounts secure, and your access fully under your control. This page explains the measures we take and the practices we follow to protect you.
Security Pillars
Encryption in Transit
All traffic is protected with TLS/SSL. Data moving between you, our servers, and connected platforms is encrypted end to end.
Secure Credential Storage
Access tokens for connected platforms are stored server-side only, never exposed to your browser or shared across accounts.
Hardened Infrastructure
We run on access-controlled, managed infrastructure (Google Firebase and managed hosting) with isolation between client accounts.
Authenticated Access
Every portal action is tied to a verified, authenticated session. Sensitive endpoints require a valid identity token.
Data Isolation
Each client's data and connections are scoped to their own account. One client can never see another's information.
Least-Privilege Permissions
When you connect a platform, we request only the permissions a feature needs — nothing more.
How We Protect Connected Platforms
When you connect a platform like Facebook, you authorize Everhelm through secure authorization (OAuth) — we never see or store your platform password. The access tokens we receive are encrypted and stored only on our servers, scoped to your account, and used solely to power the features you enabled.
You can review what each connection can access, and disconnect it instantly, from the Connections page in your portal. Disconnecting immediately revokes our access and deletes the stored tokens.
Operational Practices
Revoke Anytime
Disconnect any platform from the portal at any time. We immediately revoke access and delete stored tokens.
Proactive Monitoring
We monitor our infrastructure for availability and unusual activity to catch issues early.
Trusted Processors
Payments run through Stripe and infrastructure through Google — industry leaders with their own rigorous security programs.
No Password Sharing
We never ask for your platform passwords. Connections use secure authorization (OAuth) so you stay in control.
Your Role in Security
Security is a partnership. You can help keep your account safe by using a strong, unique password, keeping your login credentials private, disconnecting platforms you no longer use, and contacting us immediately if you notice anything unusual.
Report a Security Issue
Found a vulnerability or have a concern?
We take every report seriously. Email security@everhelmstudios.com and our team will respond promptly.
Related Policies