Trust & Privacy

Playa Ops requires an account to access any logistics data. Sign-in uses email and password authentication backed by our managed auth provider. Every internal route is gated server-side; unauthenticated visitors are redirected to the sign-in page.

Projects, art pieces, shipments, vendors, budgets, tasks, customs documents, and files are scoped to the account that created them. Database row-level security policies restrict every read and write to the owning user — one account cannot see or modify another account's records.

The app runs on the Lovable Cloud platform, which provides hosting, the managed Postgres database, authentication, file storage, and TLS for traffic to the app. Platform features are provided by Lovable; how Playa Ops configures and uses them is the responsibility of the Playa Ops team.

We store the information you enter into the app (project details, vendor contacts, shipment data, uploaded files) and the email address associated with your account. We do not sell your data.

Uploaded art photos, customs documents, and project files are stored in private buckets. They are not publicly listable and access is mediated by the application.

Data is retained while your account is active. To request deletion of your account and associated records, contact the address below.

If you believe you have found a security issue, please email the Playa Ops team and include steps to reproduce. We will acknowledge receipt and respond with next steps.

Lovable provides the underlying platform. The Playa Ops team configures the app, manages account access, and is responsible for the accuracy of data entered. You are responsible for keeping your account credentials secure.