Skip to content

    Security

    Last updated October 14, 2026

    This page explains how we protect the H1 Studio website, our client portal and the data our clients share with us. No system is perfectly secure, but we take the steps below to keep risk low.

    1. Hosting and encryption

    The website is hosted on Vercel. All traffic is served over HTTPS, so data sent between your browser and the website is encrypted in transit.

    Form submissions, client portal accounts and the reports published in the portal are stored with Supabase in its Frankfurt (EU) region. Data stored there is encrypted at rest.

    2. Access to client data

    Clients sign in to the client portal with their own email address and password. Passwords are stored by our authentication provider as one-way hashes, never in plain text, and we cannot see them.

    Database access rules limit each client account to its own reports. Only H1 Studio team members can sign in to our admin area, and we only access client data when we need it to deliver our services.

    3. Third-party tools

    To do SEO work we connect to tools such as Google Search Console and Google Analytics, usually with access you grant to our team accounts. We ask only for the access the work needs, and you can remove it at any time from the tool's own settings. When an engagement ends we remove our access or ask you to revoke it.

    4. What you can do

    • Use a unique, strong password for your portal account.
    • Do not share portal logins or private report links outside your organisation.
    • Grant tool access to named users rather than sharing your own credentials with us.

    5. Reporting a vulnerability

    If you believe you have found a security issue on this website, please email info@h1studio.ge with a description and the steps to reproduce it. We will acknowledge your report and keep you updated while we fix it.

    Please give us reasonable time to fix the issue before disclosing it, and do not access, change or delete data that is not yours, or disrupt the website while testing.

    6. Incidents

    If a security incident affects your personal data, we will tell you without undue delay and as required by applicable law. More detail on how we handle personal data is in our Privacy Policy.