Trust, security & privacy

Customer accounts are protected by email/password sign-in with optional Google sign-in. Sessions are scoped to the signed-in user, and privileged operations require an administrator role that is enforced server-side.

Investor portfolios, contract documents, and order history are only accessible to the account that owns them. Administrative actions are gated by a separate role table that cannot be edited by end users.

The application is built on the Lovable platform and hosted on Lovable Cloud, which provides managed Postgres, authentication, file storage, and edge execution. Data is transmitted over HTTPS. Row-level security is enabled on customer-facing tables so that database queries cannot bypass our access rules.

West Gulf Agency is responsible for application configuration, business logic, and the contents of customer communications. The Lovable platform is responsible for the underlying infrastructure controls.

We collect the information you provide when you contact us, place an order, request a visa or property consultation, or open an investment contract: typically your name, email, phone number, delivery address, and the details of the service you requested. Payments are processed by Stripe; we do not store full card numbers on our servers.

We use a privacy-friendly analytics service to understand which pages are popular. Analytics data is aggregated and does not identify individual visitors.

We rely on a small number of third-party services to deliver our product: Lovable Cloud (hosting, database, auth, storage), Stripe (payments), and email delivery providers used to send transactional messages and order confirmations. Each provider only receives the data it needs to perform its function.

We use cookies and local browser storage for essential functionality such as keeping you signed in, remembering your cart, your preferred language, and your selected display currency. We do not sell your personal data.

We retain customer records for as long as your account is active or as needed to provide our services and meet legal, accounting, and reporting obligations. You can request deletion of your account and associated data by contacting us.

You can request access to, correction of, or deletion of the personal data we hold about you. Email privacy@westgulfagency.com and we will respond within a reasonable period.

If you believe you have found a security issue, please email security@westgulfagency.com with a description and steps to reproduce. Please do not publicly disclose the issue until we have had a reasonable opportunity to investigate and fix it.