Security, privacy and how SAFFA HUB looks after your data

Accounts and authentication

Accounts are protected by email and password sign-in or Google sign-in. Passwords are never stored by SAFFA HUB — authentication is handled by our backend provider, which stores credentials as salted hashes. Members can reset their password at any time from the sign-in screen.

What data we collect

We collect the information you provide when you register (email, display name) and any optional profile details you add (bio, location, phone, avatar). When you create a listing, event, classified, job or recipe, the content you submit is stored alongside your account.

Who can see your data

• Your full profile (including phone, full name and membership details) is only visible to you and SAFFA HUB administrators.
• Public listings show your display name and the content you chose to publish. Contact email and phone numbers attached to businesses, classifieds and jobs are only visible to signed-in members.
• Administrative roles are managed server-side and cannot be granted by members themselves.

Hosting, encryption and subprocessors

The SAFFA HUB application is built on the Lovable platform and uses a managed Postgres database with row-level security, managed authentication, and managed file storage. Traffic to the site is served over HTTPS. Payments, when enabled, are processed by Stripe — card data never touches our servers.

Data retention and deletion

You can edit your profile and remove your listings at any time from your account. To request full account deletion or a copy of your data, email privacy@saffahub.com.au.

Reporting a security issue

If you believe you have found a vulnerability or a privacy issue, please contact security@saffahub.com.au. We appreciate responsible disclosure and will respond as quickly as we can.