How we keep your data safe and accurate
This page is maintained by Dorbyl International to answer common security and privacy questions about Dorbyl AI Lead Hunter. It describes controls that are live in the product today — it is not a certification or an independent audit.
Access & authentication
- Every workspace page sits behind an authenticated session — signed-out visitors are redirected to sign in.
- Passwords are checked against known-breach databases at signup and password change, and weak or leaked passwords are rejected.
- Sessions are issued and refreshed by the managed authentication service; we never store your password ourselves.
Data isolation
- Leads, audits, outreach messages and pipeline data are stored per account with row-level security rules enforced by the database, not just the UI.
- Every server request that reads or writes your data is verified against your signed-in session first.
- One account can never query another account's records.
Platform & hosting
- The app runs on Lovable Cloud infrastructure with a managed Postgres database and serverless backend functions.
- Traffic is served over HTTPS on our custom domain.
- This describes platform capabilities we have enabled — it is not an independent certification or audit result.
AI accuracy commitments
- Audit reports are generated from structured, checkable diagnostic fields rather than free-form prose.
- Outreach copy is written from the findings of a specific audit, so numbers in a pitch trace back to that report.
- Scores and findings are a professional assessment tool — always confirm critical claims with a client before quoting them.
Retention & deletion
- Your leads, audits and messages stay in your workspace until you delete them.
- Ask us to delete your account and we will remove your workspace data.
- Billing records handled by our payment provider are kept as long as required for accounting purposes.
Subprocessors & integrations
- Managed cloud database, authentication and hosting for running the application.
- An AI model gateway used to generate audit analysis and outreach drafts.
- Paystack for subscription payments — card details are entered on Paystack and never touch our servers.
Shared responsibility
Our hosting provider secures the underlying infrastructure. Dorbyl International configures access rules, data isolation and retention inside the app. You are responsible for keeping your login credentials private and for how you contact the prospects you generate.
Security & privacy contact
Report a vulnerability, request a data export, or ask for account deletion by contacting Dorbyl International. We acknowledge security reports and privacy requests as quickly as we can and will not pursue good-faith researchers.