Security & transparency
Trust & Security
How we protect your data and keep Elixon reliable. Your creative intelligence is valuable — we treat it that way.
How we keep your data safe
Multiple layers of protection so that no single point of failure exposes your information.
Cloudflare protection
Every request to Elixon passes through Cloudflare. This provides DDoS mitigation, a Web Application Firewall (WAF), bot management, and TLS 1.3 encryption for all data in transit.
Encrypted data storage
All customer data is stored on AWS with AES-256 encryption at rest. Automated daily backups and point-in-time recovery ensure your data is safe and recoverable.
Stripe-secured payments
All payment processing is handled by Stripe, a PCI DSS Level 1 certified provider. Credit card numbers and payment credentials never touch Elixon servers.
Secure authentication
Passwords are hashed and never stored in plain text. Sessions are managed with secure, scoped tokens. API keys are stored in environment variables, never in source code.
Your data, your control
What data does Elixon collect?
Elixon stores your account information (email, name), workspace settings, saved competitors, generated creative assets, and usage data needed to run the platform. We do not sell your data to third parties.
Where is my data stored?
Your data is stored securely on AWS infrastructure with encryption at rest (AES-256) and automated daily backups.
Who can access my data?
Only you and members of your workspace can access your data. Elixon team access is limited to what is necessary for support and platform operations.
Can I delete my data?
Yes. You can delete your account and all associated data at any time. Account deletion is permanent and removes all workspace data, saved assets, and usage history.
Questions about security?
We’re happy to walk through our security practices in detail. Reach out any time.