Security expectations for account access, escrow operations, Pi payment review, data handling, and incident reporting.
Use Pi Browser for account authentication, keep device access protected, and never share private keys, wallet recovery phrases, one-time codes, or account sessions.
Keep deal terms specific, verify counterparties, avoid off-platform payment requests, and preserve delivery evidence before releasing funds or opening a dispute.
Supabase row level security is enabled in the baseline migration. Sensitive write paths stay blocked until authorization rules and audit requirements are verified.
Send suspected vulnerabilities, account compromise, payment fraud, or data exposure to security@irangateway.app with route, timestamp, impact, and reproduction steps.