Privacy & Data

What data is collected

• Your account email and name.
• Your family name and selected country/currency for billing.
• Documents you upload, such as PDFs, JPGs and PNGs.
• Information extracted or read from those documents, with your confirmation.
• Activities, assignments, comments and reminders you create.
• Notification preferences and subscription/billing records.
• Audit records that help us record what happened, without storing document contents.

Where your data is stored

• The application database is a managed PostgreSQL service provided through Lovable Cloud / Supabase, currently hosted using Amazon Web Services infrastructure in the Asia Pacific (Seoul), South Korea region.
• Customer documents are stored in a private Supabase Storage bucket. The storage region follows the project infrastructure and is understood to be Seoul, South Korea, but we cannot independently confirm a separate storage region.
• Application and server-side processing use managed cloud/edge infrastructure. The exact processing region can vary depending on how the request is served.
• Because the service uses cloud and third-party service providers, your information may be processed or stored outside your home country.

How your data is protected

• HTTPS/TLS is used for data transmitted between the application and its services.
• Database data and stored files use provider-managed encryption at rest where supported by the underlying cloud infrastructure.
• The database uses Row Level Security (RLS) to keep each family's records separate from other families.
• Family members can only access records belonging to their own family, according to their role and permissions.
• The document storage bucket is private and does not expose public document URLs. Document access uses short-lived signed URLs that expire after approximately 120 seconds.
• Server-side authorization checks are used for protected operations.
• Cross-family access is blocked by the application's database and storage security controls.
• Files cannot be uploaded or stored by an unsubscribed family, according to the current subscription entitlement rules.

No system can be described as 100% secure. These are the controls that are currently implemented.

Who can access family information

• Family information is accessible only to authorized, active members of your family, according to their role and permissions.
• Family Admins can manage family members, documents, activities and billing-related functions available to them.
• Platform administration access exists for operational and support purposes. We do not routinely inspect customer documents, but we cannot promise that no human will ever access your data when required for support, operations or legal reasons.

Documents and AI processing

• You may upload documents such as PDFs, JPGs and PNGs. A document may contain sensitive personal information depending on what you choose to upload.
• When AI document reading is requested, the document content is sent to the application's AI service/provider for processing.
• The current application uses the Lovable AI Gateway and Google Gemini model infrastructure.
• We do not independently verify whether AI providers retain your data or use it to train models. AI-provider data handling is subject to the provider's applicable terms and privacy policies, which you should review.
• AI-generated suggestions are labelled as suggestions and require human confirmation before they become part of your records.
• The AI does not independently make medical, financial, payment or other binding decisions on your behalf.

Data retention and deletion

• Records are kept while your family account is active. You can delete individual documents and activities where the application provides that capability.
• A Family Admin can delete the entire family through the application.
• When a family is deleted, the application removes the family's stored document files as part of the deletion process before completing the family deletion.
• The application verifies that the family's stored files have been removed before reporting a successful deletion.
• Database records associated with the deleted family are removed according to the application's existing deletion and cascade behavior.
• Audit information about the deletion may be retained so that the system can record that the deletion occurred, without retaining the deleted document contents.
• An individual member can delete their own account through the Privacy Center, while Family Admins can delete the entire family through Settings.
• We cannot promise that deletion is instantly removed from every possible backup or infrastructure system maintained by the underlying cloud provider.

Backups and disaster recovery

• Our managed backend provider performs daily database backups. Backups are retained for approximately 14 days. Restores are from daily snapshots only; arbitrary point-in-time recovery is not included by default.
• Files you upload to your private document vault are stored separately from the database and are not included in database backups or exports.
• We do not independently back up uploaded files. We recommend that you keep your own copies of important documents where appropriate.
• The provider’s disaster-recovery option is database-restore from a daily backup snapshot. Uploaded files are not covered by that restore process.
• You can export or delete your information through the features provided in the application.
• Data is processed and stored by our managed backend provider as described in these terms and in the provider’s documentation. Infrastructure-specific backup and recovery details are governed by the provider’s policies.

Data export

Family Admins can export the family's records as a structured JSON file from Settings; Family Members can export the family data they are allowed to see. Both are available in Settings and in the Privacy Center. Individual document files can be downloaded where the application provides a download option on each document.

Affiliate links, advertising and marketplace analytics

• Family Hub Connect may display affiliate links and sponsored placements. Sponsored placements are labelled as advertising and are not independent recommendations or endorsements.
• Clicking a marketplace offer or sponsored placement may redirect you to an external merchant or affiliate-network website. These organisations may independently process information under their own privacy policies and terms, including through their tracking technologies.
• We record the offer or campaign identifier, country, category where applicable, and click timestamp. A randomly generated anonymous session identifier is stored in your browser's session storage and may accompany the click; it is not linked to your account or family records in marketplace click records.
• Marketplace clicks are not evidence of purchases or earned commissions. We may manually record partner-reported purchase and commission information, including report references, status, amount and currency. Automated purchase attribution or commission reconciliation is not currently implemented.
• Private family-document contents and AI-extracted information are not used for advertising targeting, and we do not sell family data to advertisers.
• Advertiser enquiries collect the company and contact details, target market, partnership interests and message submitted through the enquiry form. These details are restricted to authorised platform administrators for reviewing and responding to enquiries.

Service providers

We use the following categories of service providers to operate Family Hub Connect:

• Lovable / Lovable Cloud — application hosting and managed infrastructure/services.
• Amazon Web Services — underlying cloud infrastructure.
• Google — AI model processing through the Lovable AI Gateway.
• Razorpay — payment processing.
• Email service provider — transactional email delivery.

We do not claim that these providers have specific certifications or contractual protections unless those have already been independently verified for this application.

International data processing

Because our service uses cloud and third-party service providers, your information may be processed or stored outside your country. Our current application infrastructure is hosted in the Asia Pacific (Seoul), South Korea region.

We do not currently offer India, EU, UK, US or other region-specific data residency.

Your privacy questions and requests

For privacy or data questions, access requests, deletion questions or other data-related concerns, contact us at support@aiprocurebridge.com.