platform
Security
Password recovery, session limits, and how to report vulnerabilities.
1 min read · Updated 2026-03-01
AI explanation
Salvya security practices cover Supabase-authenticated sessions, password reset flows, device session management, and a responsible disclosure channel via contact.
- Password reset via verified email links
- Signed-in users can update passwords from account settings
- Admin and API routes enforce role checks server-side
- Report security issues through the contact channel
Account recovery
See sign-in help and /forgot-password.
Disclosure
Email security concerns via /contact.
Related articles
Trust & safety
How Salvya protects fans, artists, and creators from abuse and fraud.
AI platform overview
Canonical AI-readable index of Salvya entities, flows, and documentation URLs.
How Salvya works
Official artist merch, limited drops, attributed creator sales, and enterprise checkout.
Platform architecture
High-level system map for customers, creators, and integrators.
