Effective and updated September 8, 2026
Layered safeguards protect accounts, payments, private data, creator operations, and paid access.
- No full card storage
- Server-side access checks
- Reports: contact@wowlab.ai
No online service can guarantee absolute security. Do not access others' data or disrupt the service while investigating.
1. Accounts
Secure sessions, password controls, OAuth, and extra verification protect accounts. Use a unique password, current recovery methods, and sign out on shared devices.
2. Payments and access
A payment provider handles full card details. Verified server callbacks, idempotent processing, orders, and entitlement checks prevent duplicate payment and browser-side authorization.
3. Playback and content
Playback uses entitlement checks and short-lived signed links. Upload validation, private storage, controlled publication, and review protect unreleased works.
4. Data access
Private and public data are separated and protected by role and row-level authorization. Sensitive administrative and payout actions are restricted and recorded.
5. Resilience
Controls include restricted secrets, encrypted transport, dependency and upload checks, logging, monitoring, backups, recovery, and incident response. Authenticated and payment data must not enter public caches.
6. Reporting
Email contact@wowlab.ai with subject “Security Report”; include affected URL or feature, impact, reproduction steps, and safe evidence. Do not send secrets or unrelated personal data. Good-faith reports avoiding privacy violations, destruction, disruption, social engineering, and persistent unauthorized access are reviewed by risk.