Text goes into JSON form and into DB. There's no other security mechanisms in place beside HTTPS protocol.