Guardella

Security

Where your data goes, and where it doesn’t.

Last reviewed 14 November 2026

Where your data lives

Guardella runs entirely on Cloudflare: the app on Workers, data in a D1 database, thumbnails and exports in private R2 storage that is served only after a workspace check. No other hosting provider holds your data.

Access tokens are encrypted

The tokens Instagram and Facebook give us are encrypted with AES-GCM before they are stored, decrypted only in the one part of the code that talks to Meta, and never sent to a browser or written to a log.

AI that keeps nothing

Comments are judged by decision models on Cloudflare Workers AI with zero data retention. The model stores nothing, no other AI provider sees the text, and it is never used for training.

What we never log

Comment text and usernames never go into logs, metrics or product analytics. Those record ids and outcomes only.

Your settings decide every action

The model only judges; code maps its answer to the action you chose. Every request is limited to your own workspace. Delete is off until you turn it on, waits 24 hours, and checks the comment again before it runs.

Payments

Card details go straight to Stripe. We never see or store a full card number.

Report a weakness

Draft — legal review

Email hello@guardella.com with the steps to reproduce it. Please don’t access other people’s data, slow the service down, or make it public before it is fixed.

We reply within [3 working days — confirm] and will not take legal action over good-faith research that follows these rules.