https://thestreamlinefactory.com/assets/TrustPage-x30p43Mc.js

1import{j as e}from"./react-vendor-C-_weJGF.js";import{L as t}from"./LegalPageLayout-ebwTteib.js";import"./index-sHdJRwRo.js";import"./query-DA-B5yju.js";import"./radix-CMA3xQgM.js";import"./icons-BZJMmL1V.js";import"./supabase-BppBjPB2.js";import"./motion-CfmjrLVm.js";function h(){const i=[{id:"overview",label:"Overview"},{id:"access",label:"Access & Authentication"},{id:"platform",label:"Platform & Hosting"},{id:"data",label:"Data Collection & Use"},{id:"subprocessors",label:"Subprocessors"},{id:"cookies",label:"Cookies & Analytics"},{id:"retention",label:"Retention & Deletion"},{id:"requests",label:"Privacy Requests"},{id:"security",label:"Security Contact"},{id:"compliance",label:"Compliance"}];return e.jsxs(t,{title:"Trust & Security",description:"How Streamline Factory protects your data, the controls we have in place, and how to reach us with security or privacy questions.",seoTitle:"Trust & Security | Streamline Factory",seoDescription:"Streamline Factory's trust page: security, privacy, and data handling practices for thestreamlinefactory.com.",slug:"trust",toc:i,children:[e.jsx("p",{children:"This page is maintained by Streamline Factory Inc. to answer common security and privacy questions about thestreamlinefactory.com and the tools we publish. It describes controls that are currently in place. It is not an independent audit or certification."}),e.jsx("h2",{id:"overview",children:"Overview"}),e.jsx("p",{children:"Streamline Factory operates a content site and a small set of self-serve tools (roof report intake, contact forms, meeting booking, newsletter). Security is a shared responsibility: our hosting and database providers operate the infrastructure, we configure the application, and customers are responsible for protecting their own account credentials."}),e.jsx("h2",{id:"access",children:"Access & Authentication"}),e.jsxs("ul",{children:[e.jsx("li",{children:"The public site is read-only. There is no public account signup."}),e.jsx("li",{children:"Admin access is limited to authorized Streamline Factory staff and protected by email and password authentication with role checks enforced on the server."}),e.jsx("li",{children:"Administrative roles are stored in a dedicated roles table and validated server-side; client-supplied role claims are not trusted."})]}),e.jsx("h2",{id:"platform",children:"Platform & Hosting"}),e.jsxs("ul",{children:[e.jsx("li",{children:"The application is hosted on Lovable Cloud, which runs on managed cloud infrastructure with encryption in transit (HTTPS/TLS) and encryption at rest for the database and storage layers."}),e.jsx("li",{children:"Server-side logic runs in isolated edge functions. Database access is governed by row-level security policies."})]}),e.jsx("h2",{id:"data",children:"Data Collection & Use"}),e.jsx("p",{children:"We collect only what is needed to deliver the services you request:"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Contact form submissions (name, email, phone, message)."}),e.jsx("li",{children:"Meeting booking details (name, email, optional phone and notes, selected time)."}),e.jsx("li",{children:"Newsletter email addresses, when you opt in."}),e.jsx("li",{children:"Roof report request details that you submit."})]}),e.jsxs("p",{children:["We do not sell personal data. See our"," ",e.jsx("a",{href:"/privacy-policy",className:"text-primary hover:underline",children:"Privacy Policy"})," ","for the full disclosure."]}),e.jsx("h2",{id:"subprocessors",children:"Subprocessors & Integrations"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Lovable Cloud (application hosting, database, storage, edge functions)."}),e.jsx("li",{children:"Transactional email provider for confirmation and notification emails."}),e.jsx("li",{children:"Google Calendar for meeting scheduling, when you book a meeting."}),e.jsx("li",{children:"Analytics and tracking scripts configured by the site owner (see Cookies & Analytics below)."})]}),e.jsx("h2",{id:"cookies",children:"Cookies & Analytics"}),e.jsx("p",{children:"The site uses cookies and similar technologies for essential functionality and, where enabled by the site owner, for analytics and marketing measurement. You can control cookies through your browser settings."}),e.jsx("h2",{id:"retention",children:"Retention & Deletion"}),e.jsxs("p",{children:["We retain submitted data for as long as needed to respond to your request, fulfill a service, or meet legal obligations. You can request deleti

1on at any time via our"," ",e.jsx("a",{href:"/data-deletion",className:"text-primary hover:underline",children:"Data Deletion"})," ","page."]}),e.jsx("h2",{id:"requests",children:"Privacy Requests"}),e.jsxs("p",{children:["To request access to, correction of, or deletion of personal data we hold about you, contact us using the address below or via the"," ",e.jsx("a",{href:"/legal-contact",className:"text-primary hover:underline",children:"Legal Contact"})," ","page."]}),e.jsx("h2",{id:"security",children:"Security Contact"}),e.jsx("p",{children:"If you believe you have found a security vulnerability, please report it to us privately so we can investigate and remediate before public disclosure."}),e.jsxs("ul",{children:[e.jsx("li",{children:"Streamline Factory Inc., Magnolia, TX (Greater Houston)"}),e.jsx("li",{children:"Phone: 866-360-0142"}),e.jsxs("li",{children:["Use the ",e.jsx("a",{href:"/contact",className:"text-primary hover:underline",children:"Contact"}),' page and mark your message "Security".']})]}),e.jsx("h2",{id:"compliance",children:"Compliance"}),e.jsx("p",{children:"Streamline Factory is a small business and does not currently hold formal third-party certifications such as SOC 2 or ISO 27001. We follow the platform security guidance provided by our hosting provider and aim to align our practices with widely accepted privacy principles. This page will be updated as our practices evolve."})]})}export{h as default};