Platform & Data Security

Summary

• All traffic is encrypted with HTTPS/TLS; form input is validated and sanitized server-side.
• Inquiry data is stored in a managed Supabase database with row-level access controls.
• The administration area requires authenticated sessions and is not accessible to buyers.
• Credentials, API keys, and tokens are held as server-side environment secrets — never in browser code.
• Report vulnerabilities via our Contact page; we acknowledge reports within three business days.

Infrastructure you can verify

This website is hosted on Vercel — edge deployment, automated HTTPS, and network-level DDoS mitigation — with database and file storage on Supabase, a managed Postgres platform with encryption at rest. Both providers maintain independent security certifications and published compliance programs.

We keep dependencies updated and review integration configuration and access controls regularly as the platform evolves.

How buyer inquiries are protected

Inquiry and quote request forms on this website use server-side validation, input sanitization, and secure data transmission over HTTPS/TLS. Submitted data is stored in a managed database (Supabase) with row-level access controls.

Your inquiry details are accessible only to authorized VOVOHO team members. They are not exposed to other buyers, public APIs, or third-party marketing systems.

Admin area access

The website administration area — used by VOVOHO to manage product listings, inquiries, blog content, downloads, and certifications — is protected by login authentication and server-side session checks.

If you arrive at an admin URL without authorization, you will be redirected to a login page. These routes are not intended for buyer access and contain no buyer-relevant content.

Documents and file access

Certificates, catalogs, specification sheets, and media kit files are served through controlled file storage. Documents marked as publicly available are accessible via direct download links shown on product and resources pages.

Confidential project files, custom artwork, engineering drawings, and brand-specific documents are not stored at public URLs and are not discoverable through this website.

Form and API protection

Inquiry and quote endpoints are protected against automated submissions and abuse through rate limiting, spam detection, and server-side validation. This protects the quality of buyer communication and ensures your contact information is not exposed through form abuse.

Credentials and environment security

Database credentials, API keys, storage tokens, admin passwords, and deployment secrets used to operate this website are stored as server-side environment variables. They are never exposed in browser code, HTML output, public pages, or downloadable files.

Data handling

Personal data submitted through this site is handled as described in our Privacy Policy — collected only for B2B sourcing communication, retained for up to three years, and never sold or shared with third-party marketers. You may request access, correction, or deletion at any time.

Reporting a security concern

If you discover a security vulnerability, misconfiguration, or unintended data exposure on this website, please contact us directly using the details on our Contact page. We acknowledge security reports within three business days and investigate promptly.

We do not operate a formal bug bounty program, but we recognize and appreciate responsible disclosure.

Common questions

• Is my inquiry data encrypted? Yes — in transit via HTTPS/TLS and at rest in managed database storage.
• Can other buyers see my project details? No. Inquiry and project data is visible only to authorized VOVOHO staff.
• Do you run a bug bounty program? No formal program, but we acknowledge and investigate responsible disclosure.
• Where is the website hosted? On Vercel (hosting and deployment) and Supabase (database and file storage).