This page is maintained by the AI.3rd.EYE Alumni Association Tracker team to answer common security and privacy questions about the platform. It describes controls that are currently enabled in the application; it is not an independent certification or audit attestation.
Accounts are created by invitation or by self-registration with administrator approval. Authentication is handled by our managed backend provider; passwords are stored as salted hashes by that provider and are never visible to the application or to administrators.
Roles are stored in a dedicated server-side table. Privileges (super admin, association admin, chapter admin, treasurer, committee member, member) are enforced on the server through row-level security policies — the client cannot grant itself additional access by modifying browser state.
Each chapter's records (members, events, donations, communications, branding, contact information) are scoped by chapter and association IDs. Row-level security policies restrict every query to the chapters the signed-in user belongs to or administers. Super administrators can view all chapters for support and oversight.
Uploaded branding files (logos, banners) are served through our managed storage layer. Files intended to be displayed on the public website are readable by unauthenticated visitors; all other uploads remain restricted to authorized roles.
The application runs on a managed serverless edge runtime with TLS terminated at the edge. The database, authentication, and file storage are provided by a managed backend service. Secrets (API keys, service-role credentials) are held in server-side secret storage and are never shipped to the browser.
Lovable is the development and hosting platform for this application. Platform-level features are provided by Lovable; the application owner is responsible for the data handling, retention, and operational practices described on this page.
Administrative actions on chapters, members, branding, contact information, and permissions are written to an append-only audit log. The log is readable only by super administrators and is used to investigate any reported issue.
If you believe you have found a security vulnerability or have a privacy question about your data, please contact the association administrator listed in your chapter's contact information. Include a description of the issue and steps to reproduce it. We will acknowledge reports and work with you on a resolution.
This page reflects the current configuration of the application and may be updated as the platform evolves. Return to home.