How we protect you
- Every connection is encrypted (HTTPS), and browsers are told to always use it.
- Card and bank details go straight to Paystack. They never touch SonikBlu’s servers.
- Every payment is confirmed with Paystack on our server before a receipt is shown, and payment notifications are only accepted when Paystack’s signature checks out.
- Sign-in is handled by Clerk, so we never store passwords ourselves.
- Secret keys live only on our servers, never in the app you download.
- Our pages can’t be embedded in other sites, which blocks a common kind of clickjacking scam.
Stay safe
SonikBlu will never ask for your password, PIN or one-time code by message, and never asks you to send money outside the app. Tips and sales only happen through checkout, with a receipt. If someone asks, report it.
Report a vulnerability
If you find a security problem, tell us through the contact form (choose “Something else” and start with “Security”). Please give us a reasonable time to fix it before telling anyone else, don’t access other people’s data, and don’t disrupt the service. We won’t take legal action against good-faith research that follows these rules, and we’ll credit you if you’d like.