Data isolation
Row Level Security on every table
Your trades, accounts, notes, and profile are stored with database-enforced Row Level Security — meaning the database itself, not just the app, rejects any attempt to read or write another user's data. This is enforced server-side and can't be bypassed from the browser.
No self-upgrade paths
Your subscription plan can only ever be changed by a verified payment or an authenticated admin action — there's no way to modify your own plan status directly, even by tampering with API requests.
Admin access is gated and audited
Internal admin tools re-verify admin status on every request, server-side. Being logged in as a regular user grants zero access to other users' data or account controls.
Payments
We never see your card details
All payments are processed by Razorpay, a PCI-DSS compliant payment processor. Your card number, CVV, and UPI credentials never touch LiquixTrades' servers — Razorpay handles that directly.
Server-verified transactions
Every payment is independently verified against Razorpay's own records before your plan is activated — a modified or replayed request can't grant access it wasn't actually paid for.
Infrastructure
Encrypted in transit
All traffic between your browser and LiquixTrades is encrypted over HTTPS/TLS, including trade data, screenshots, and account information.
If you believe you've found a vulnerability, please email liquixtrades@gmail.com directly rather than posting it publicly. We take reports seriously and will respond as quickly as we can.