# Security

How exclam.ai handles security and privacy: TLS in transit, encryption at rest on Google Cloud, Firebase Auth, least-privilege backends, deletion on request.

Canonical URL: https://exclam.ai/security/

We use Firebase for auth and data. All traffic is encrypted in transit (TLS). Data stored in Google Cloud is encrypted at rest.

- OAuth via Google or email/password (Firebase Auth)
- Least‑privilege service accounts on the backend
- Rate limiting and session hardening
- Data deletion on request: [support@exclam.ai](mailto:support@exclam.ai)

Report a security issue: [security@exclam.ai](mailto:security@exclam.ai) • [security.txt](https://exclam.ai/security.txt)