Security & Trust

Sign-in is handled through managed authentication with secure sessions, password strength requirements, and a self-service password reset flow.

Each user's data is isolated at the database layer through Row Level Security (RLS) policies. A row is only returned when the authenticated user is authorized to see it.

We encourage members to use a strong, unique password and to keep their account credentials private.

HER Empire Era runs on a managed cloud backend and edge network. The underlying infrastructure is operated by our platform provider, who maintains physical security, network isolation, and patching of the core platform.

Application-level security — including access controls, secure coding practices, dependency updates, and data handling — is the responsibility of HER Empire Era.

All traffic to and from the site is served over HTTPS using TLS.

This page describes our current practices; it is not an independent security certification or audit report.

We collect the information you provide when creating an account, using AI tools like Victoria, uploading files, or filling out forms.

We also collect limited usage data to keep the service running, prevent abuse, and improve features.

We do not sell your personal information. Details are in our Privacy Policy.

We rely on a small set of trusted service providers to operate the platform:

Authentication and database services, payment and subscription management through Paddle, AI model providers that power Victoria and other features, analytics and support tooling, and email delivery services.

Each provider is contractually limited to using data only for the services they provide to us.

We use essential cookies for authentication, security, and session management.

Limited preference and analytics cookies help us remember settings and understand how the platform is used.

Marketing cookies are only used with consent where required by law. You can manage cookies through your browser settings.

We keep personal data only as long as needed to provide the service, comply with legal obligations, and resolve disputes.

Account data is retained while your account is active and for a reasonable period after closure to meet tax, billing, and audit requirements.

You can request deletion of your data by contacting us at the email below.

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data.

To exercise any of these rights, email us at concierge@yourempireconcierge.com. We aim to respond within one month.

If you believe you have found a security issue, received a suspicious message claiming to be from us, or need to report an incident, please contact us immediately.

Email: concierge@yourempireconcierge.com

We welcome responsible disclosure of security vulnerabilities. Please send a clear description of the issue, steps to reproduce it, and any potential impact.

Do not access data that does not belong to you, disrupt the service, or perform testing that could affect other users.