Every campaign generated in Art Maker and every transaction scheduled in our Lifestyle Agentic Budget & Payment Platform is governed by strict financial, cryptographic, and factual guardrails.
When you book a creative partner or pay for a verified merchant order via Bach, funds are held in escrow until you confirm delivery. Zero premature releases.
Direct wallet transfers and instant Flutterwave settlements are strictly restricted to verified Cravour Merchants. Unverified vendors are logged safely as budget outflows.
Art Maker uses only the product facts and prices you supply. Our prompts prohibit inventing prices, fake ratings, or unverified discounts, and you preview every asset before publishing.
System API keys are stored in Google Cloud Secret Manager. If you supply your own Gemini, Grok, or ElevenLabs API key (BYOK), it is scoped strictly to your authenticated session.
All traffic across cravour.com and our `/api` endpoints runs over TLS 1.3 with HSTS preload, strict Content Security Policy rules, and anti-clickjacking headers.
Full compliance with the Nigeria Data Protection Act (NDPA). Export or permanently erase your creative history and financial logs at any time.
If you discover a security vulnerability, please report it directly to our engineering security team at security@cravour.com. We acknowledge all legitimate reports within 24 hours.