---
title: "Seminara Security, Privacy & Data Protection Architecture"
description: "Codebase-verified security standards, zero AI model training pledge, and cryptographic tenant isolation on seminara.online."
canonical: "https://seminara.online/security"
last-updated: "2026-08-23"
---

# Seminara Security, Privacy & Data Protection Architecture

> Codebase-verified security standards, zero AI model training pledge, and cryptographic tenant isolation on seminara.online.

## Core Security Commitments

### 1. Zero AI Model Training Guarantee
Customer presentation decks, speaker notes, custom knowledge bases, and attendee voice transcripts are NEVER used to train, retrain, or fine-tune external foundation models. All API payloads are dispatched under strict zero-data-retention parameters.

### 2. Database Tenant Isolation (Row-Level Security)
All application data resides in Supabase PostgreSQL guarded by strict Row-Level Security (RLS) policies requiring verified authentication matching the host account (`auth.uid() = host_id`).

### 3. Encryption Standards
- **In Transit**: Strict TLS 1.3 encryption across all REST, SSE, and WebRTC streaming connections.
- **At Rest**: AES-256 storage encryption across all database tables, asset buckets, and vector indexes.

### 4. PCI-DSS Level 1 Payment Handling
100% of billing subscriptions and payment processing is handled exclusively through Dodo Payments (certified PCI-DSS Level 1 Merchant of Record). Zero payment card numbers or CVVs are ever collected, processed, or stored on Seminara servers.

### 5. GDPR & CCPA Data Rights
- **Right to Access & Export**: Download session transcripts, audio logs, and lead capture records at any time.
- **Right to Erasure**: Deleting a presentation session permanently removes all associated slides, scripts, and embeddings.

### 6. Vulnerability Disclosure
Report legitimate security findings directly to: [shivamselam@seminara.online](mailto:shivamselam@seminara.online?subject=Security%20Vulnerability%20Report).