Security

Your account

• Passwords are hashed before they are stored, using the ASP.NET Core Identity password hasher. Nobody at VaaniCraft can read your password — not support, not engineering.
• Signing in issues a short-lived access token plus a refresh token, so a captured token stops working quickly rather than lasting forever.
• Signing out revokes the refresh token for that session.

Your data in transit and at rest

• Every connection to this site, to the app and to our API is served over HTTPS (TLS). Content is never sent in the clear.
• The application and its database run on Microsoft Azure, where stored data is encrypted at rest by the platform.
• Application logs are shipped to Azure Log Analytics so we can investigate errors and unusual activity.

Payments

Card payments are handled end to end by Stripe, a PCI DSS Level 1 certified provider. Card numbers are entered directly into Stripe and never reach VaaniCraft's servers — we store only the subscription status Stripe reports back.

Your LinkedIn connection

• You connect LinkedIn through LinkedIn's own OAuth screen. We never ask for, see or store your LinkedIn password.
• The access we request covers publishing posts and reading the analytics for the posts and pages you choose to connect.
• You can disconnect from inside VaaniCraft, or revoke access at any time from LinkedIn's own settings, and we stop being able to act on your behalf immediately.

AI generation

Drafts, ideas and reply suggestions are generated with Google's Gemini models. The prompt we send contains the brief and strategy context needed to write that piece — your goals, audience, tone and the topic you asked for. We do not sell your content, and we do not publish anything to your accounts unless you tell us to.

Access inside VaaniCraft

• Production access is limited to the engineers who need it to run the service.
• We look at the content in your workspace only when you ask us to — for example when you report a bug we cannot reproduce.

Reporting a vulnerability

If you believe you have found a security issue, email vaanicraft@vrittiq.co.uk with the details and how to reproduce it. Please give us a reasonable window to fix it before making it public. We will confirm receipt and keep you updated until it is resolved.