Trust
How we protect
your data and ours.
This page is maintained by Vine Reach Solutions and summarizes the security and privacy controls in place on this website. It is informational and is not a certification or an attestation by any third party. Last updated: July 10, 2026.
We use reasonable administrative, technical, and physical safeguards designed to protect the information you submit through this site. No method of transmission or storage is perfectly secure; we do not represent this site or any online service as impenetrable.
Hosting & infrastructure
The website runs on a managed cloud platform with HTTPS enforced site-wide and TLS certificates renewed automatically. Backend data is stored in a managed Postgres database operated by our cloud provider, with provider-managed encryption at rest and in transit.
Data we collect from this site
Only what you submit through the contact / demo forms (name, email, phone, business name, topic, message), plus a one-way hash of your IP address and the user-agent string for abuse prevention. We do not run third-party advertising or profiling trackers on this site. Full detail is in our Privacy Policy.
Access control
Form submissions are written by an anonymous, validated insert path and can only be read or modified by an authenticated administrator. Roles are stored in a dedicated table and checked via a security-definer database function, not on a user profile row, to prevent privilege escalation. Admin sign-in supports email/password and Google.
Input validation & form hardening
Every field is validated twice: once on the client and again on the server with the same schema, before it touches the database. Length bounds, character restrictions, strict email format, and an allow-list for the "interest" field are enforced as database constraints, so a malformed payload cannot be persisted even if it bypassed the UI. The site does not render any user-submitted content as HTML.
Secrets management
Service-role credentials are server-only, never shipped to the browser, and never read at module scope of shared files. Only publishable, RLS-gated keys appear in client code.
Subprocessors
- Managed cloud backend & database provider: hosting, database, authentication.
- Cal.com: embedded scheduling calendar on the Book a Consultation page.
- Google: only when an administrator chooses "Sign in with Google".
- Transactional email provider: delivers internal lead notifications.
Backups & continuity
The database is backed up by our cloud provider on the provider's standard schedule. Source code is versioned and recoverable. We do not store any data that cannot be recreated from a backup or from re-submission.
Vulnerability reporting
If you believe you have found a security issue on this site, please email info@vinereachsolutions.com with the steps to reproduce. Please give us a reasonable opportunity to address the issue before any public disclosure, and do not access or modify data that is not yours.
What we do not claim
We do not currently hold SOC 2, ISO 27001, HIPAA, PCI-DSS, or GDPR certification for this website. We describe the controls we actually run; we do not represent them as equivalent to those frameworks.