Security
This page is maintained by NexaEcom to answer common security and privacy questions about our service.
Last updated: July 26, 2026
Not a certification
This page describes our current security practices and the platform capabilities we rely on. It is not an independent audit, certification, or guarantee of security.
Platform + operator practices
Security is a shared effort. Lovable Cloud and Supabase provide the underlying hosting, database, and authentication infrastructure. NexaEcom configures access controls, manages application-level permissions, and follows operational security practices. Customers are responsible for safeguarding their own credentials and marketplace account access.
Access & authentication
Admin access is gated by authenticated accounts and role-based permissions. We enforce strong passwords and restrict administrative functions to authorized team members only.
Platform & hosting
Our application and database are hosted on Lovable Cloud / Supabase infrastructure, which provides managed infrastructure, automated backups, and standard network protections.
Data handling
Lead and client data is stored in a managed database with row-level security policies. We access data only as needed to deliver services and respond to support requests.
Data collection and use
We collect only the information needed to operate the site and deliver services. Data is used for consultation responses, project delivery, billing, and service improvement.
Subprocessors & integrations
We rely on Lovable Cloud and Supabase for backend infrastructure. Additional subprocessors may include email, payment, and analytics providers as disclosed in our Privacy Policy.
Cookies and analytics
We use cookies for essential site operation and may use analytics to understand site usage. We do not use intrusive cross-site tracking without appropriate consent.
Retention and deletion
We retain personal information for the duration of the service relationship and a reasonable period afterward for legal and operational purposes. You can request deletion by contacting us at info@nexaecom.com.
Privacy requests
To access, correct, or delete your personal information, email us at info@nexaecom.com. We will respond within a reasonable timeframe and may need to verify your identity before processing the request.
Incident and security contact
If you suspect a security issue or have questions about our security practices, please contact us at info@nexaecom.com or call +1 (281) 698-5304.
Vulnerability reporting
We appreciate responsible disclosure of potential vulnerabilities. Please send reports to info@nexaecom.com with enough detail for us to evaluate and reproduce the issue. Do not exploit vulnerabilities beyond what is necessary to demonstrate the issue.