1import{j as e}from"./index-CzAkNt2W.js";import{C as s}from"./ContentPage-C1fWYWjk.js";const t=()=>e.jsxs(s,{eyebrow:"Trust",title:"Trust & Security",lede:"How SplashIQ protects your workspace, manages access and handles your business data.",children:[e.jsx("h2",{className:"font-display text-2xl font-bold mt-8",children:"Authentication & access"}),e.jsx("p",{children:"SplashIQ uses managed authentication with email/password and Google sign-in. Sessions are protected with short-lived tokens, and every workspace is isolated by role-based access controls (owner, office, technician, homeowner). Staff and homeowner portals can be toggled independently by an owner."}),e.jsx("h2",{className:"font-display text-2xl font-bold mt-8",children:"Data isolation"}),e.jsx("p",{children:"All customer, property, visit, billing, and team data is scoped to your workspace using database row-level security. Users can only read or modify rows that belong to their workspace and role. Homeowner portal links use unguessable per-property tokens."}),e.jsx("h2",{className:"font-display text-2xl font-bold mt-8",children:"Encryption"}),e.jsx("p",{children:"Data is encrypted in transit (TLS) between your browser, our application, and our infrastructure providers, and encrypted at rest by our managed database and storage providers."}),e.jsx("h2",{className:"font-display text-2xl font-bold mt-8",children:"Hosting & subprocessors"}),e.jsx("p",{children:"SplashIQ is packaged as a portable Node application with managed Postgres, authentication, and object storage. Email delivery and outbound notifications use configured providers under data-processing agreements. We do not sell personal information."}),e.jsx("h2",{className:"font-display text-2xl font-bold mt-8",children:"Payments & integrations"}),e.jsx("p",{children:"Optional integrations such as QuickBooks and marketing email are opt-in per workspace. Online payment and financing controls are shown only when a verified provider flow is available. Credentials for connected services are stored server-side and never exposed to browsers."}),e.jsx("h2",{className:"font-display text-2xl font-bold mt-8",children:"Data retention & deletion"}),e.jsxs("p",{children:["Workspace owners can export or delete records from inside the app. Account deletion requests are honored within 30 days. Contact"," ",e.jsx("a",{className:"text-primary hover:underline",href:"mailto:[email protected]",children:"[email protected]"})," ","to request a full export or erasure."]}),e.jsx("h2",{className:"font-display text-2xl font-bold mt-8",children:"Vulnerability reporting"}),e.jsxs("p",{children:["If you believe you have found a security issue, please email"," ",e.jsx("a",{className:"text-primary hover:underline",href:"mailto:[email protected]",children:"[email protected]"}),". We appreciate responsible disclosure and will acknowledge reports promptly."]}),e.jsx("h2",{className:"font-display text-2xl font-bold mt-8",children:"Shared responsibility"}),e.jsx("p",{children:"SplashIQ provides the platform controls described above. Workspace owners are responsible for managing teammate access, using strong passwords, enabling two-factor authentication where available, and configuring integrations appropriately for their business."}),e.jsxs("p",{className:"mt-8 text-sm text-muted-foreground",children:["For privacy details, see our"," ",e.jsx("a",{className:"text-primary hover:underline",href:"/legal/privacy",children:"Privacy Policy"})," ","and"," ",e.jsx("a",{className:"text-primary hover:underline",href:"/legal/terms",children:"Terms of Service"}),"."]})]});export{t as component};
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.