Back to home

Security at OFzest

You're trusting us with sensitive content. Here's how we protect it.

Encryption in transit and at rest

Your uploads and account data are encrypted in transit (TLS) and at rest on our cloud infrastructure.

Role-based access controls

Access to production systems and customer content is restricted by role and limited to what's required to operate the service.

Public surfaces only

Scanning covers indexed public results. OFzest never asks for your platform login, subscriber DMs, or earnings data.

Biometric data, on your terms

Face matching is optional. Face geometry is processed via AWS Rekognition solely to find your own likeness, and is deleted when you remove the person profile or your account.

Deletion on request

You can request deletion of your content and personal data at any time by emailing privacy@ofzest.com.

SOC 2 in progress

SOC 2 compliance work is currently in progress. We'll publish updates here as milestones are reached.

For full details on what we collect, how long we keep it, and your rights, see the Privacy Policy.

Found a vulnerability? Report it to privacy@ofzest.com with "Security" in the subject line and we'll follow up.