Security Center
At Bhavya Luxe, security is built into every layer of our platform. Here's how we protect your data, payments, and account.
How We Protect You
Enterprise-grade security built for consumers
TLS/SSL Encryption
All data transmitted between your device and our servers is encrypted using TLS 1.3, ensuring your personal and payment information is always secure in transit.
AES-256 Data Encryption
Sensitive data stored in our databases — including passwords, tokens, and payment references — is encrypted at rest using AES-256 military-grade encryption.
Two-Factor Authentication
Protect your account with OTP-based two-factor authentication. Every login is verified via your registered mobile number before access is granted.
PCI-DSS Compliant Payments
We never store card numbers or CVVs. All payment processing is handled by PCI-DSS Level 1 certified gateways (PayU, Razorpay) with tokenization.
Session Management
Sessions are managed with short-lived JWT tokens and secure HttpOnly cookies. Inactive sessions are automatically expired to prevent unauthorized access.
Regular Security Audits
Our infrastructure undergoes quarterly penetration testing by independent security researchers and continuous automated vulnerability scanning.
Responsible Disclosure Program
Found a security vulnerability? We appreciate responsible disclosure from the security community. Report issues to our security team and we'll acknowledge your contribution.