Security & privacy at YourLocalSavings

Accounts are protected by email/password sign-in with hashed credentials handled by our managed authentication provider. Administrative actions are gated by server-side role checks; client-side role claims are never trusted on their own.

The application is built on Lovable and runs on a managed cloud backend. Database access is protected by row-level security policies so that each user only sees the records they are permitted to access. Describing these enabled platform capabilities is not a certification claim.

We collect the information you provide when creating an account or a business listing (name, email, business details, photos) and basic usage data needed to operate the service. We do not sell personal data. For specific questions about what we store, contact us using the address below.

We rely on a small number of vetted providers to deliver the service, including our hosting and database platform and our payment processor (Stripe) for subscription billing. Payment card data is handled directly by Stripe and never stored on our servers.

Account and listing data is retained while your account is active. You can request deletion of your account and associated business listings by contacting us; we will remove the data within a reasonable timeframe, except where we are required to retain limited records for legal or accounting purposes.

If you believe you've found a security issue, please email us so we can investigate. Include steps to reproduce and any relevant details. We appreciate responsible disclosure and will acknowledge reports as quickly as we can.

Security is a shared responsibility. We maintain the application and the controls described above; customers are responsible for keeping their account credentials confidential, using strong unique passwords, and reviewing the content they publish on their business listings.