Security

The Last Detail is operated by Aundraya Ruse, a sole proprietor doing business as The Last Detail.

Everything you enter is stored in a managed Postgres database run by our infrastructure provider. Traffic between your browser and the service is encrypted in transit with TLS, and the database and its backups are encrypted at rest by the provider.

Every table that stores your answers has row level security enabled, with policies that scope each row to the account that created it. A signed in session can read and write only its own rows, and an unauthenticated request reaches nothing at all.

This is not a one time setup. The policies are verified and re-verified as the app changes, so new tables and new features stay inside the same access rules.

The product is built to be useful without holding the things that would do the most damage if exposed. We deliberately do not collect full account numbers, passwords, or Social Security numbers. Fields ask for an institution name, an account type, a location, or the last four digits instead. Less sensitive data collected means less at risk in the first place.

You can delete your account at any time from Settings inside the app. Deleting your account removes account-linked content from active systems after confirmation. Limited transaction, security, legal, and backup records may remain for the periods described in the Privacy Policy and are not available for ordinary account restoration. Print or save your document first if you want a copy. See the Privacy Policy for the full detail.

The hosting, database, and authentication layers are operated by our providers, who publish their own security documentation and independent audit posture. We are not the audited entity for that infrastructure; they are. Their documentation is the right place to verify the underlying controls:

• Supabase Trust Center for the database and authentication platform.
• Lovable security documentation for the application hosting platform.

No system is perfectly secure, and we will not tell you otherwise. What we can state plainly is what is true and checkable: your data is encrypted in transit and at rest, row level access control limits it to your own account, and we do not store your credentials. Please protect your own sign in details and any printed copy of your document.

Found something that looks wrong? Email support@getthelastdetail.com and we will look at it.