Security

Security is the product.

Member data and invite links are the two things a community cannot afford to leak, so both are locked down by default.

Private invites

Discord invite links live in a gated store and are only returned to owners and joined members.

Row-level security

Every table enforces per-user access rules at the database level.

Payments

Paid access is only granted after Stripe confirms payment, and revoked on cancellation, failure, or dispute via a signature-verified webhook.

Highlights

  • Owner-only member lists
  • Gated invite links
  • Verified Stripe webhooks
  • Staff-only roadmap status