Security

1. Our Security Commitment

At Athenaeum, the security of your personal data and learning information is our top priority. We use industry-standard security practices throughout the platform.

2. Data Encryption

• All data is transmitted over HTTPS/SSL
• Passwords are hashed and never stored in plain text
• Supabase provides enterprise-grade database security

3. Authentication Security

• Email and password login with encryption
• Google OAuth for secure social login
• Passkey support for passwordless login
• Role-based access control: Students, Teachers, Parents, and Admins each have separate secured access

4. Payment Security

• Payments are processed by Stripe and JazzCash
• We never store credit card details
• All payment data is PCI-DSS compliant
• Transactions are encrypted end-to-end

5. Account Protection

• Automatic logout after inactivity
• Suspicious login detection
• Password reset via verified email only
• hCaptcha on login to prevent bots

6. Reporting a Security Issue

If you discover a security vulnerability, please report it responsibly:
Email: support@athenaeumacademy.com
We take all security reports seriously and respond within 24 hours.