Security without invented guarantees.

Security is treated as an engineering and operational responsibility across authentication, authorization, server-side secrets, payment verification and access to application data.

JyotiAI uses authenticated sessions and server-side authorization checks for protected functionality. Sensitive server credentials are intended to remain outside client-side application code.

Payment flows use provider-side transaction processing and server-side verification before JyotiAI grants the corresponding entitlement. JyotiAI does not claim that beginning checkout alone grants access.

Production web traffic is expected to use HTTPS transport provided by the deployed web infrastructure. JyotiAI also relies on established third-party cloud services for portions of its infrastructure. We do not claim a specific at-rest encryption algorithm, security certification or audit status unless it has been separately verified.

No application, network or storage system can guarantee complete security. Security practices evolve as the product, providers and threat landscape change.

If you believe you have identified a security issue affecting JyotiAI, please use the security contact published on our Contact page. Do not exploit, publicly disclose or access other users' information while investigating a suspected issue.