Security

Airocrew runs marketing agents that act for your business without a human in the loop — so safety is enforced in code, and every action is recorded.

Guardrails on every action

• Every outbound action (post, email, website change) passes a policy check, spend limits and your guardrail settings before it happens.
• A kill switch pauses your entire crew instantly; per-agent toggles pause individual agents.
• Every action is written to an audit log you can review in the dashboard.
• Unsubscribe requests are honored automatically and permanently.

Your data

• All traffic is encrypted in transit (TLS). Data is stored with Supabase (Postgres) and hosted on Vercel.
• Sign-in is passwordless — Google or a magic link — so there is no password to steal.
• Payment details are handled entirely by Stripe and never touch our servers.
• Each customer’s data is scoped to their account; your crew can only ever see your business.

Reporting a vulnerability

Found something? Email team@airocrew.com and we will respond quickly. Please give us reasonable time to fix an issue before disclosing it publicly.