Security
Cekira uses account authentication, workspace permissions and encryption to protect access to your business information. This page describes the protections used by the service and how to contact us about security.
Account and workspace access
Password-based accounts use password hashing. You can also choose to sign in with Google. Access to workspace information is checked against your membership and role, with different permissions for owners, administrators and other members.
Keep your sign-in credentials private and review the people invited to your workspaces. If you suspect unauthorised access, contact support@cekira.com.
Connections and integration credentials
Connections to Cekira use HTTPS. Stored Linear and Gmail connection access and refresh tokens are encrypted using AES-256-GCM. Connecting a tool is optional; you can disconnect it from Settings → Integrations. Google sign-in is separate from a Gmail connection and does not request mailbox access.
Where data is kept, and who can see it
The application and database run on Hetzner servers in Germany. Uploaded files are stored in Microsoft Azure in Germany, where they are encrypted at rest. Staff can view a customer's workspace only through a support session, which is read-only, ends after 30 minutes, requires a recorded reason and is logged. Our privacy policy lists the companies that help us run Cekira, and our data processing agreement explains how we handle data for your business.
Subscription payments
Subscription payment details are entered through Stripe's hosted checkout. Cekira does not receive or store your full payment-card number or security code. We keep payment references and subscription status to manage access and support billing requests.
Privacy and data requests
Our privacy policy explains the data we process, the service providers involved, retention and your privacy rights. You can request help with access, correction or deletion by emailing support@cekira.com.
Report a security concern
Send a description of the issue, the affected page and steps to reproduce it to support@cekira.com. Include the approximate time if the issue relates to a specific event. Please exclude passwords, access tokens, payment details and other people's personal data from your message.
When investigating an issue, use only accounts and data you are authorised to access and avoid actions that could disrupt the service. We review reports and coordinate any follow-up information with the reporter.
For operator details and general service conditions, see our terms of service.