Guides · Security and data handling

Guides

Security and data handling

How Citeaxis stores your account, your thread, and your Blueprint, and what we do not train on from this product.

Your account

Passwords are scrypt hashes. Sessions are 30-day sliding cookies. OAuth is OIDC + PKCE. Reset and verify tokens are single-use.

Your projects

Threads, proposals, Blueprints, and zips live in Citeaxis’s PostgreSQL. Zips are locked until unlock. Downloads require project.download.

Payments

Stripe handles cards. Citeaxis stores session ids and amounts, not card numbers.

What this product is not

Citeaxis is not a place we train a public model on your brief. Organization data stays on the project. The root panel is Citeaxis operations, not a client share.