Trust & Security

This page is maintained by the Boost4Boost team to answer common security and privacy questions about Boost4Boost. It describes controls currently enabled in our app and is not an independent certification or audit attestation.

Shared responsibility

Boost4Boost runs on the Lovable platform. Lovable provides hosting and platform capabilities; we configure the application, define access rules, and decide what data is collected. Customers are responsible for keeping their account credentials safe and using the service in line with our Terms.

Access & authentication

• Email/password and Google sign-in are available; sessions are managed by our authentication provider.
• Each user can only read and modify their own profile, credits, campaigns, and task history.
• Administrative actions are gated by server-side role checks, never by client state alone.

Platform & hosting

The app is hosted on Lovable Cloud. Application traffic is served over HTTPS. Database access from the browser is mediated by row-level security policies so users only see rows they are authorized to see.

Data we collect

• Account data: email, display name, language preference.
• Product data: campaigns you create, tasks you complete, credit balance and ledger entries.
• Operational data: minimal logs needed to run the service and investigate abuse.

We do not sell personal data. See our Privacy Policy for details on retention and your rights.

Subprocessors & integrations

• Lovable Cloud — application hosting, database, authentication, and storage.
• Google — optional sign-in provider when you choose “Continue with Google”.

Boost4Boost is not affiliated with, endorsed by, or sponsored by any of the social networks referenced in the app.

Cookies & analytics

We use essential cookies required for sign-in and session management. Optional analytical cookies are only set after you accept them in the cookie banner; you can change your choice at any time.

Retention & deletion

You can request deletion of your account by contacting us. On deletion we remove your profile and associated personal data, subject to limited retention required to prevent fraud or meet legal obligations.

Reporting a vulnerability

If you believe you have found a security issue, please contact us with details and steps to reproduce. Please do not publicly disclose the issue until we have had a reasonable opportunity to investigate and respond.

Questions

For privacy, security, or compliance questions, reach out via the contact channels listed in our Privacy Policy.