Dashboard credentials and API keys are verified using stored hashes. Payment webhooks must pass signature verification before credits are granted. See the privacy page for data handling.
Report suspected vulnerabilities to nik@toneperfect.app. Do not include API keys, passwords or learner audio in the initial report.