Security & privacy at Accfin Software
This page is maintained by Accfin Software to answer common security and privacy questions about the Sky practice suite and this website. It describes controls that are currently in place — it is not a certification or an independent audit.
Authentication & access
Admin areas of this website are gated by authenticated sign-in. Privileged actions (such as viewing contact submissions or document download requests) require an admin role enforced server-side, not just in the browser.
Row-level security
Application tables in the backend database have row-level security enabled. Read and write rules restrict each table to the roles that need it — for example, contact and document request records are readable only by admins.
Secrets handling
Service credentials and API keys live in server-side secret storage and are only read from server functions. They are never bundled into the browser app.
Hosting & platform
This website runs on the Lovable platform with a Supabase-backed database, authentication and storage. Traffic to the site is served over HTTPS.
Analytics & cookies
We record basic page-view analytics to understand which content is useful. Analytics data is only readable by Accfin admins.
Data we collect
When you submit the contact form or request a downloadable resource we store the details you provide (such as name, firm, email and phone) so we can respond to you and send the requested document.
Shared responsibility
Security is a shared responsibility. Accfin Software is responsible for the design and operation of our application, the configuration of our database access rules, and the handling of data you submit through this website. The Lovable and Supabase platforms are responsible for the underlying hosting, network and managed services. Customers are responsible for safeguarding their own login credentials and keeping their account and contact information up to date.
Retention & deletion
Contact submissions and document download requests are retained so our team can follow up and so customers can re-download resources they have previously requested. If you would like a record removed, contact us using the details below and we will action the request.
Vulnerability reporting & security contact
If you believe you have found a security issue affecting this website or our services, please email us with details so we can investigate. Use the contact form on the contact page and mark your message as a security report.