Docs
Security
How Filary separates authentication, payment infrastructure, demo data, and workspace access.
Filary handles sensitive business records, so the product is built around a simple rule: keep high-risk systems specialized and keep user actions explicit.
Payments
- Card and payout flows run through Stripe infrastructure.
- Filary does not ask for or store your bank login credentials.
- Sensitive payment details should stay with the payment provider.
- Payment state is displayed in Filary so business records remain useful.
Accounts and sessions
- Authentication uses secure sessions instead of permanent client-side secrets.
- Server-side access checks protect admin and workspace flows.
- Demo sessions are kept separate from live data paths.
- Unfinished areas stay behind the account so they are not exposed on the public site.
Operational boundaries
Security is not only encryption. It is also making sure the product does not encourage sloppy workflows. Filary avoids asking for credentials it does not need and keeps payment authority with dedicated providers.
Security contact
Send security reports to hello@kivo.app with the subject Security. Include the affected route, steps to reproduce, and impact if you can share it safely.
