Your channel data stays yours.

ChannelzIQ is built with security at every layer. From encryption to access control, we protect your data so you can focus on creating.

Data Protection

Your content, analytics, and personal information are safeguarded with industry-standard protections at rest and in transit.

  • TLS/SSL Encryption in Transit

    All data transmitted between your browser and our servers is encrypted using TLS 1.2+ with strong cipher suites. Every connection to channelziq.com and its subdomains is served over HTTPS.

  • Encryption at Rest

    Database backups are encrypted with a key held outside the server and copied to a separate location, so a copy of a backup is not a copy of your data. Platform access tokens are encrypted in the database with a separate key. The server's own disk is not encrypted at rest — we would rather say so than imply a protection we do not have.

  • Automated Daily Backups

    Databases and critical system data are backed up nightly, and every backup is checked against the live database for completeness before it is accepted. We restore from a backup by hand periodically to confirm it actually works — the first such rehearsal found the backups had been silently omitting part of the schema, which is exactly why we do them.

  • Data Isolation

    Every request is scoped to the organization it belongs to, and automated checks run on each deploy to catch a query that forgets to filter by it. Isolation is enforced in software rather than by separate databases, so we treat it as something to keep testing rather than something proven once.

Authentication & Access Control

Sign-in is by emailed one-time code or Google, so there is no password for us to lose. Sessions expire and can be ended from any device.

  • Secure Authentication

    User authentication is powered by JSON Web Tokens (JWT) with short-lived sessions. Tokens are stored in HttpOnly cookies to prevent cross-site scripting attacks.

  • Role-Based Access

    Platform access is segmented by role. Creators, administrators, and internal systems each have distinct permission levels, ensuring the principle of least privilege is maintained.

  • Session Expiry & Rotation

    Sessions automatically expire after a defined period of inactivity. Token rotation is enforced to minimize the impact of any compromised credential.

Infrastructure & Monitoring

Automated checks run against every service every five minutes and email a human when one fails.

  • Rate Limiting & DDoS Mitigation

    All API endpoints are protected by rate limiting at the Nginx level. Sensitive endpoints have stricter thresholds to prevent abuse, brute-force attacks, and denial-of-service attempts.

  • Health Monitoring & Alerting

    Automated health checks continuously monitor all services. Alerts trigger immediately on anomalies such as process crashes, disk usage spikes, or connectivity issues.

  • Audit Logging

    Administrative actions are logged in a dedicated audit trail. This includes account changes, configuration updates, and access events for full accountability.

  • Regular Updates & Patching

    Our server infrastructure and application dependencies are kept up to date with the latest security patches. We monitor for vulnerabilities and apply fixes promptly.

API Security

Every request is rate-limited per address, every write is checked against the signed-in account, and request bodies are validated before they reach a query.

  • Security Headers

    All responses include Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options headers to protect against common web vulnerabilities.

  • Input Validation & Sanitization

    All user input is validated and sanitized at the API layer before processing. This prevents injection attacks, malformed data, and unexpected behavior.

  • CORS Policy

    Cross-Origin Resource Sharing is configured with strict origin allowlists. Only authorized domains can make API requests, preventing unauthorized cross-site access.

Compliance & Data Rights

You can export everything we hold as a spreadsheet, and delete it, without asking us.

  • Privacy-First Principles

    ChannelzIQ is built with privacy-first principles. We collect only the data necessary to provide our services, and you can request access, correction, or deletion of your personal data at any time. ChannelzIQ is not yet certified or formally compliant with the EU General Data Protection Regulation (GDPR) or the UK Data Protection Act — see our Privacy PolicyDo Not Sell Section 9 for the full international-users disclosure.

  • Transparent Privacy Policy

    Our Privacy Policy clearly explains what data we collect, how we use it, and who we share it with. No surprises, no hidden clauses.

  • Data Deletion

    You can request complete deletion of your account and all associated data. We honor deletion requests promptly and ensure data is purged from active systems and backups.

  • Cookie Consent

    We use a clear cookie consent mechanism that lets you choose which cookies to accept. Read our Cookie Policy for full details.

Built on Trust

The standards and practices that keep your data safe every day.

SSL/TLS

All connections encrypted with TLS 1.2+

Encryption

Data encrypted at rest and in transit

Daily Backups

Nightly encrypted backups, held off-site and restore-tested

99.5% Availability Objective

Every service checked every five minutes, with alerts to a person. The objective and how it is measured are published in our SLO document; a single-server setup does not promise more.

Privacy-First

No data sold, no advertising trackers

Have a Security Question?

If you've found a vulnerability or have questions about how we protect your data, our security team is ready to help.