Trust & Security

How we protect your data

This page is maintained by the Honest Money team to answer common questions about how the Help Desk handles your information. It describes current practices and is not an independent certification.

Access & authentication

Sign-in is required for the staff console and customer portal. Sessions use industry-standard token-based authentication, and staff accounts are scoped by role (super admin, admin, agent, read-only) so each teammate only sees what they need.

Internal AI notes, admin annotations, and other staff-only fields are never returned to signed-out visitors or customer accounts.

Data we collect

We collect what you send us through a support ticket or knowledge-base search: your message content, email address, optional attachments, and the basic metadata needed to route and respond (ticket ID, timestamps, status). If you sign in, we also store your display name and account preferences.

We do not sell your information, and we do not use it for advertising.

Hosting & infrastructure

The Help Desk runs on Lovable Cloud, which uses managed Postgres with row-level security, encrypted storage at rest, and TLS in transit. Backups, patching, and platform-level hardening are handled by the underlying platform; you can read more in Lovable's platform documentation.

Retention & deletion

Tickets and related messages are kept while your account is active so we can reference past conversations. If you'd like us to delete a specific ticket, your account, or your attachments, email us at the address below and we will action the request.

Subprocessors & integrations

We use a small set of trusted services to operate the Help Desk: email delivery, optional Telegram notifications for staff, and AI providers for ticket triage and knowledge-base suggestions. AI requests are sent only as needed to answer or classify a ticket and are not used to train third-party models.

Report a security concern

If you believe you've found a vulnerability or a privacy issue, please email support@honest.money with a clear description and steps to reproduce. We'll acknowledge your report and work with you on a fix.