How we protect checkout and account activity

Overview

Fashion_Fussion uses authenticated customer accounts and server-side verification for ecommerce checkout. Product totals, GST, promotions and delivery charges are calculated or verified by the backend before an order is finalized.

Payment security and recovery

• Razorpay orders are created by the backend using server-side credentials.
• The browser cannot set the authoritative product price, GST rate, discount or final payable amount.
• Prepaid responses are verified on the server and captured payments are cross-checked against the stored order, user and amount.
• Checkout finalization includes state and duplicate-processing protections.
• If a browser callback is interrupted, server-side reconciliation support is available. Customers should check My Orders before attempting a second payment.
• Cash on Delivery orders do not pass through Razorpay.

Account and database security

• Checkout requires an authenticated Supabase account.
• Row Level Security is used on customer-facing database tables to restrict records by the signed-in user and administrator role.
• Administrator-only product cost data is not exposed through the public catalogue.
• Cart data may be stored in the browser, but final checkout values are recalculated or verified by the backend.

Payment secrets

Fashion_Fussion pages do not ask customers to enter card CVV values, UPI PINs or net-banking passwords. Prepaid payment credentials are handled through Razorpay's payment interface. Never share an OTP, CVV, UPI PIN or net-banking password with anyone claiming to provide Fashion_Fussion support.

Infrastructure

Fashion_Fussion currently uses Supabase for authentication and database services, Razorpay for prepaid payment processing, and Vercel for production hosting and backend APIs.

Privacy

Customer-data categories, purposes, retention and privacy-request information are documented on the dedicated Privacy Policy page.

Report a security issue

Changes

This page is updated when material account, checkout, payment or security behavior changes.