Trust & Security
This page is maintained by Australian Property Forum to answer common security and privacy questions about the site. It describes app-visible controls and is not a certification or independent audit.
Shared responsibility
Australian Property Forum relies on the Lovable Cloud platform (built on Supabase infrastructure) for hosting, database, authentication, and serverless functions. Platform security capabilities are provided by Lovable; configuration of access rules, data retention, and content moderation within this app is the responsibility of Australian Property Forum.
Access & authentication
- The public site requires no account; readers browse anonymously.
- Administrative actions are gated behind a server-validated password and are not exposed to the client.
- Internal article-pipeline fields are restricted to the backend and never returned to browsers.
Data we collect
We collect anonymous usage analytics (page views, device type, approximate region) via Google Analytics and serve ads via Google AdSense. We do not request names, emails, or accounts from readers. See the Privacy Policy for full detail.
Subprocessors & integrations
- Lovable Cloud / Supabase — hosting, database, edge functions
- Google Analytics & AdSense — analytics and advertising
- Anthropic — AI article drafting (server-side only)
- Replicate — hero image generation (server-side only)
Data handling
- All database access is governed by row-level security policies.
- Sensitive credentials are stored as server-side secrets and never shipped to the browser.
- Outbound crawlers identify themselves with an APFBot User-Agent.
Reporting a security concern
Email us via the address listed on the Legal page. We aim to acknowledge security reports promptly.
Australian Property Forum does not claim SOC 2, ISO, GDPR, HIPAA, or PCI certification. Statements on this page reflect current app configuration and may change as the product evolves.