Security

• Payments: handled by Stripe Checkout. Card numbers never reach Cadence.
• Accounts: passwordless email links or PBKDF2-hashed passwords; HttpOnly, Secure, SameSite cookies; sign-out everywhere on password change.
• Forgery & abuse: CSRF tokens on every form, rate limits on sign-in and forms, strict input validation.
• Webhooks: Stripe, Twilio and Vapi requests are signature- or secret-verified.
• Browser: strict Content-Security-Policy, HSTS, no third-party trackers, no ad pixels.
• Your control: export your calls anytime, delete your account from the dashboard.

Found a problem? Email [email protected].