LISTIQ PREP · TRUST & TRANSPARENCY
Security overview
Last updated
Transport and account access
Connections use HTTPS encryption in transit. Managed authentication verifies sessions for private account operations. Database row-level access controls restrict user-owned records; privileged operations verify the caller server-side. Private form submissions have no anonymous or ordinary-user read access.
Extension tokens and abuse prevention
The backend stores SHA-256 hashes of paired extension tokens, not their raw secrets. The browser extension stores the credential locally for requests; treat it as sensitive. Pairing codes are short-lived and single-use. Requests use atomic daily quotas and request-rate limiting. Revoke paired devices in Settings.
Operational safeguards and limits
Input validation and length limits apply before AI calls and form storage. We avoid exposing private keys in browser code. Managed providers operate infrastructure and backups. These measures reduce risk, not eliminate it; we do not assert an independent security certification or guarantee against every incident.
Responsible disclosure
Report suspected vulnerabilities privately to support@licenseiq.co, attention Security, with a minimal reproduction and affected URL. Do not access other users’ records, disrupt the service, exfiltrate data or publish exploit details before coordination. This is not a paid bounty or authorization for intrusive testing. For an exposed credential, revoke it and contact us promptly.
Contact
Contact IQ Realty Labs, New Jersey, USA, at support@licenseiq.co. For privacy rights use the Your choices request page. Do not send passwords or sensitive identity documents in an initial message.
Related: Privacy · Your choices · Account settings