GetlyTrust & security
Plain, verifiable statements about how the platform handles security, data and payments. No claims we can't back.
Security practices
- Payments are processed by NOWPayments (USDT/USDC) - Getly never stores your card or wallet credentials.
- All traffic is served over HTTPS/TLS.
- Authentication is OAuth and email magic-link based.
- Uploaded files are checked for blocked file types and disguised executables, and every new product is reviewed before it goes live.
- APIs are rate-limited and protected against cross-site request forgery.
Subprocessors
The third-party infrastructure providers that process data on Getly's behalf.
netcupDedicated server - application, PostgreSQL database and cache (self-managed by Getly)
CloudflareContent delivery network & DDoS protection
Cloudflare R2File storage & delivery
PayPalPayPal payments made before 28 September 2026 and their refunds
NOWPaymentsCrypto payments & payouts
StripeCard payments and payouts made before September 2026 (historical records)
ResendTransactional email
TrustpilotReview invitations after a paid order (buyer name, email and order reference)
OpenAISearch embeddings & AI features
Since 2026-08-31 the application and its PostgreSQL database run on a dedicated server administered by Getly (hosted by netcup, EU). Vercel and Neon no longer process any data.
Full data-handling detail is in our privacy policy: /privacy.
Report a vulnerability
Found a security issue? We welcome responsible disclosure - please give us a reasonable window to fix before going public. Email [email protected].