Security at Danilli
Updated October 3, 2026
Your safety comes first. This page explains, in plain words, how Danilli protects your account and your information, and what you can do to stay safe.
🔒 EncryptedEvery connection to Danilli uses HTTPS. Your data is stored with a provider that encrypts it at rest.
👤 Private chatsYour chats, files and memory are visible only to you when signed in. We don't sell your data or use your messages for advertising.
🛡️ Danilli ShieldTwo-step login, sign-in history and a daily spending limit.
💳 No card numbers storedPayments are handled by Stripe. Danilli never sees or stores your full card number.
Your account
- No passwords to steal. You sign in with a one-time link sent to your email.
- Two-step login. Add a 6-digit code from an authenticator app, so a stolen email alone can't get in. Turn it on in Danilli Shield.
- Sign-in history. See recent sign-ins and sign out everywhere with one button.
- Spending limit. Set a daily credit limit so a mistake or a stolen session can't drain your balance.
- Bot protection. Sign-in and the free trial are protected by Cloudflare Turnstile to block spam and automated attacks.
Your information
- Chats, projects, files and memory are tied to your account and locked so only our server can read them on your behalf. Other users can never see them.
- You can delete any chat or project, turn memory off, export your data, or delete your account and everything in it from Settings.
- Uploaded pictures are shared with the AI model only through temporary links that expire after one hour.
- Danilli has no access to your computer, phone, email or bank, and it can't take actions on your accounts. It only gives answers.
- Text inside files and web pages is treated as information, never as instructions. Danilli tells you if a file contains hidden instructions.
Who processes what
| Provider | What it does |
|---|---|
| Vercel | Hosts the website and server code over HTTPS. |
| Supabase | Stores accounts, chats, files and usage; encrypts data at rest. |
| Stripe | Processes payments. Card details stay with Stripe. |
| AI service providers (AI routing and AI models) | Process your messages to produce answers. |
| Cloudflare | Bot protection on sign-in and the free trial. |
| bundle.social | Only for Danilli Social: publishes the posts you approve. We never see your social media passwords. |
These providers maintain their own independent security certifications. Full details are in our Privacy Policy.
Staying safe
- Never share passwords, one-time codes, full card or bank numbers, or Social Security numbers in any chat. Danilli will never ask for them.
- Not sure about a message, invoice or link? Use Scam Check in Danilli Shield before you click or pay.
- Turn on two-step login for Danilli and for your email.
Report a security issue
If you find a vulnerability or think your account was misused, email info@danilli.ai with the subject "Security". Please don't share details publicly until we've had a chance to fix it.