Security Policy

Protecting your information is part of how we build Amazebazaar Fashion.

• Encryption: the entire website uses HTTPS (TLS) with HSTS.
• Passwords: stored only as salted one-way hashes; we never see your password.
• Payments: handled entirely by PCI-DSS compliant payment partners.
• Account protection: sign-in rate limiting, lockouts after repeated failures, one-time passwords and secure, HTTP-only session cookies.
• Admin access: role-based permissions, mandatory strong passwords, two-factor authentication and full audit logs.
• Application security: protection against SQL injection, cross-site scripting (XSS) and cross-site request forgery (CSRF); uploaded files are scanned for type and re-encoded.
• Backups: regular encrypted database backups.

Stay safe

• We will never ask for your OTP, card PIN, CVV or UPI PIN.
• Only trust messages that link to https://amazebazaar.com/.
• Use a strong, unique password and sign out on shared devices.

Report a vulnerability

If you find a security issue, please email support@amazebazaar.com with details. Please don't access other customers' data or disrupt the service. We'll acknowledge your report within 72 hours.