Your data is protected with industry-standard encryption and enterprise-grade security practices.
PDC Dev Studio employs multiple layers of security to protect your code, conversations, and personal information.
✓ All communication uses HTTPS with TLS 1.3.
Your data is encrypted while traveling between your device and our servers, preventing interception or eavesdropping.
✓ Cryptographically signed session tokens.
Your login sessions are protected with Ed25519 signatures and HTTP-only, secure cookies to prevent session hijacking.
✓ Strict user ownership boundaries.
Your code, chats, and workspace are isolated at the database level. You can only access your own data.
✓ Request throttling on all APIs.
Rate limits prevent abuse and protect your account from unauthorized access attempts or credential stuffing attacks.
✓ End-to-end message encryption.
Active chat sessions use XChaCha20-Poly1305 encryption with per-message authentication, ensuring only you and our servers can read your conversations.
✓ Message counters and timestamps.
Each encrypted message includes a unique counter and timestamp validation to prevent replay attacks and message reordering.
✓ All data stored on Google Cloud Platform with encryption at rest.
We do not store sensitive data (passwords, payment info, private keys) in plaintext. Payment processing is handled exclusively by Stripe with PCI DSS compliance.
✓ OAuth 2.0 via Google Sign-In.
We never store your password. Google manages authentication securely, and we only receive a verified identity token.
✓ All APIs require authentication and origin validation.
Cross-site request forgery (CSRF) protection via same-origin policy. All requests must originate from dev.primarydesignco.com.
✓ Minimal data retention policy.
Usage logs are retained for up to 90 days. You can delete your account and all associated data at any time from Account Settings.
Security is an ongoing responsibility. We:
We partner with trusted providers for specific services:
Each provider maintains their own security standards and data policies. We recommend reviewing their privacy and security documentation.
If you discover a security vulnerability, please email security@primarydesignco.com with details. We appreciate responsible disclosure and will respond promptly.
Do not: Publicly disclose vulnerabilities before we have time to address them.
For security-related questions or concerns, contact support@primarydesignco.com.
See our Privacy Policy for additional details on data handling and your rights.
Last updated: August 3, 2026