Security
How XUMBELL protects payments, product files and customer data.
Maintained by XUMBELL
This page is maintained by XUMBELL to answer common security questions about the store. It describes the controls we currently have in place; it is not an independent audit or certification.
Payments
We never handle your card, UPI or bank credentials. Payments are processed entirely by our payment gateway partner on its own secure, PCI-DSS compliant infrastructure. Every payment is verified server-side with a cryptographic signature before an order is marked paid.
Encryption in transit
The entire website, including checkout and the download page, is served over HTTPS/TLS.
Product file protection
Product files are stored in a private storage bucket that is not publicly readable. Downloads are served through short-lived signed links issued only after a valid, paid order is verified, and each order has a download expiry and download-count limit.
Account and data access
Sign-in supports email/password and Google. Customer data is protected by row-level database security so that a customer can only read their own orders, and administrative functions require a verified admin role checked on the server.
Shared responsibility
We secure the store, its data and its files. You are responsible for keeping your account password confidential, using a secure device, and not sharing your download links with others.
Reporting a vulnerability
If you believe you have found a security issue, email xumbell2@gmail.com with the details and steps to reproduce. Please do not publicly disclose the issue before we have had a chance to respond. We acknowledge reports within 24 hours.
Contact us
XUMBELL · Email: xumbell2@gmail.com · Phone: +91 8310728524 · Registered business address: Site No. 58, 6th Cross Road, Silicon Town, Electronic City, Doddanagamangala Village, Bengaluru, Karnataka 560100, India. Support is available Monday to Sunday, 10:00 AM – 7:00 PM IST and we reply within 24 hours.