Security

Infrastructure and encryption

• All connections to the Platform are encrypted with HTTPS/TLS.
• The database and files are stored encrypted with our infrastructure provider, Supabase ([Supabase sunucu bölgesi, ör. Frankfurt (Almanya)]), and are backed up regularly by the provider.
• Card details are not stored on RNKHUB servers; payments are collected by the payment provider.

Access control

• Row-level security (RLS) in the database and server-side authorization checks ensure each user can access only what their role allows.
• Studios can define custom roles and module-level permissions in their panel.
• Access to the RNKHUB admin panel requires a passkey or an authenticator app code, and administrative actions are logged.

Account security

• Passwordless sign-in with a passkey (Face ID / Touch ID), SMS code, or Google or Apple is supported.
• Passwords are stored as one-way hashes, never in plain text.
• You can review active sessions in the app settings and sign out of other devices.
• Sign-in attempts and sensitive actions are protected by rate limiting.

Reporting a vulnerability

If you believe you have found a security vulnerability, please email the details to info@rnkhub.com and do not disclose it publicly until it is fixed. We review reports as quickly as possible and get back to you.

Data breaches

If a breach affects personal data, we make the required notifications to the Turkish Personal Data Protection Board and affected individuals, and we inform affected studios without delay.