Security & privacy
This page is maintained by the Guardxflow team to answer common questions about the platform's security and privacy. It is not an independent certification. Security is shared between the hosting infrastructure, Guardxflow as the publisher, and you as the user of the application.
Access & authentication
Access to the application requires authentication by email/password or via a third-party identity provider (Google). Sessions use signed tokens and passwords are never stored in plaintext.
Each user sees only their own invoices, suppliers, jobs and entities, through access rules applied at the database level.
Hosting & data
The application is hosted on a managed infrastructure (Lovable Cloud, based on Supabase). Data at rest and in transit is encrypted by the hosting provider.
Invoice PDFs are stored in a private bucket: only files uploaded by your account are accessible by your account.
Email connections
When you connect a Gmail or Outlook mailbox, Guardxflow uses OAuth: your credentials are never shared with or stored by the application.
You can revoke access at any time from the Settings page or directly from your Google/Microsoft account.
AI invoice processing
Invoice data extraction is performed by an AI model via the Lovable gateway. PDFs are transmitted solely for extraction and are not used to train new models.
Subcontractors & integrations
- Lovable Cloud / Supabase — hosting, database, authentication, storage
- Google & Microsoft — OAuth and email reading (at your request)
- Intuit QuickBooks Online — accounting sync (at your request)
- Lovable AI Gateway — AI invoice extraction
No data is sent to third-party integrations without your explicit connection.
Retention & deletion
Your invoices and attachments are kept while your account is active. You can delete an invoice at any time from the app. To request full deletion of your account and associated data, contact us at the address below.
Security contact
To report a vulnerability or ask a security question, write to security@guardxflow.com. We commit to acknowledging receipt within 72 business hours.
Last updated: June 2026. This document is maintained by the Guardxflow team and may change; nothing stated here constitutes a contractual guarantee.