How Nodux protects your account and data.
This page is maintained by the Nodux team to answer common security and privacy questions about the Nodux app. It describes the controls that are live in the product today.
This is app-owned editable content, not an independent certification or third-party audit. Nodux is built on the Lovable platform; references to platform capabilities describe what we have enabled, not a Lovable-issued guarantee.
Accounts & authentication
- Email + password and Google sign-in, handled by our managed auth provider.
- Sessions are tied to your device and can be ended by signing out.
- Passwords are never stored in plain text and are not visible to Nodux staff.
Roles & access inside Nodux
- Customers see only their own orders, complaints, and payments.
- Partners see only orders assigned to them, plus orders broadcast in their area.
- Admin tools are restricted to the Nodux operations team.
- Role changes are recorded in an internal audit log.
What we collect and why
- Account: name, phone, email — to set up and contact you about pickups.
- Orders: pickup address, item selection, notes — to fulfil the service.
- Partner applications: business details and uploaded documents — for vetting.
- Support and complaint messages you choose to send us.
How your data is protected in the app
- Per-row access rules on every database table restrict reads and writes to the owner or an authorised role.
- Uploaded files (profile images, partner documents, complaint attachments) are stored in private buckets — not on a public URL.
- Sensitive partner fields (approval status, payout details, earnings) can only be changed by the Nodux team.
- Connections between your browser and Nodux use HTTPS.
Retention & deletion
- Account and order records are kept while your account is active and for as long as needed to handle disputes or meet legal obligations.
- To request deletion of your account or specific data, contact us through the support page.
Contact & security reports
- Questions about your data or this page: send us a support request.
- If you believe you have found a security issue, please report it through the same support channel and mark it as security-related so the team can triage it quickly.
Shared responsibility
Nodux runs on the Lovable platform. The platform provides the hosting, managed database, and authentication building blocks. Nodux is responsible for the configuration, access rules, and product behaviour described above. You are responsible for keeping your sign-in credentials private and for the accuracy of the information you submit through the app.
This page is reviewed and updated by the Nodux team as the product changes. It does not constitute a legal contract or a compliance certification.