How we protect your data

All traffic between your browser and Solar Coach is encrypted with TLS 1.2+. Data at rest in our databases and file storage is encrypted using AES-256. Authentication tokens and password hashes are managed by our backend platform using industry-standard algorithms (bcrypt-class hashing, never plaintext).

Solar Coach runs on Lovable Cloud, which is built on top of Supabase (Postgres) and Cloudflare's global edge network. Primary data is stored in U.S.-based data centers. We do not run our own servers or maintain our own data center.

We support email + password sign-in and managed OAuth via Google and Apple. Passwords are checked against the Have I Been Pwned database to block known-breached credentials. We do not use anonymous accounts. Sessions are managed with secure, httpOnly tokens.

Row-level security policies in our database ensure each user (and each team's manager) can only read and write the rows they're authorized to. A very small number of Maddox Edge engineers have production database access, used only for support and incident response, and access is revoked when no longer needed.

Solar Coach is a training tool. Please do not upload or paste:

• Real prospect or customer personal data (full names paired with addresses, SSNs, financial account numbers)
• Payment card data or credentials
• Health information or anything covered by HIPAA
• Documents you don't have rights to share

See our Terms for the full list.

If you believe you've found a security issue, please email security@maddoxedge.com with details and reproduction steps. We'll acknowledge within two business days. Please do not publicly disclose until we've had a chance to investigate and remediate.