Security commitment
MedaStaré uses layered safeguards designed for account data, private media, AI content and subscription entitlements. No service can promise absolute security, and this page does not disclose defensive secrets.
1. Security program
- Role based access and least privilege principles.
- Secure authentication, session management and protected secret storage.
- Encryption in transit for production endpoints.
- Private media storage and time limited access links where supported.
- Logging controls that exclude passwords, tokens, private prompts and sensitive images.
- Dependency, SDK and privacy manifest review for iOS releases.
- Backup, recovery, incident response and provider management procedures.
- Abuse detection, rate limits and account protection controls.
2. User responsibilities
- Use a unique password and protect the device.
- Do not share OTP codes, Sign in with Apple credentials or support verification links.
- Review account activity and report suspected access promptly.
- Avoid sending sensitive content by ordinary email.
3. Responsible vulnerability reporting
Security researchers may send a clear report to support@medastare.com. Include the affected URL or feature, reproduction steps, impact and a safe proof of concept. Do not access another user account, download unnecessary data, disrupt availability, use social engineering or publish the issue before MedaStaré has a reasonable opportunity to investigate.
MedaStaré does not promise a bounty. Good faith reports will be reviewed and handled according to risk and available resources.
4. Incident response
MedaStaré investigates suspected incidents, contains risk, restores service, documents the event and notifies users or regulators when applicable law requires notification. Details may be limited while an investigation is active or to protect security.
5. Contact
For an account security issue, contact support@medastare.com.