← Back to labels

Trust & Privacy

This page is maintained by the Figo team to answer common security and privacy questions about Figo Label Studio. It describes current app-visible controls and practices. It is not an independent certification or audit. See also our Privacy Policy.

Shared responsibility

Figo Label Studio runs on the Lovable Cloud platform. The platform provides hosting, managed authentication, and a managed Postgres database. The Figo team is responsible for the application code, access roles, content shown on labels, and day-to-day operations. Customers and staff are responsible for keeping their accounts and devices secure.

Access & authentication

Admin and staff areas require sign-in. Sessions are issued by the managed auth provider and stored in the browser only — Figo does not store passwords directly. Role-based access (owner, admin, manager, staff) controls what each user can read or change.

Public visitors can browse only products that have been explicitly published. Draft and internal product data are not visible to the public.

Data protection in the app

Database tables enforce row-level access rules so each signed-in user only sees data their role allows — for example, store staff see their own store's inventory and their own uploads. Privileged operations (such as inviting admins or processing uploads) are performed server-side and require the appropriate role.

Traffic between your browser and the app is served over HTTPS by the hosting platform.

What data we handle

Figo Label Studio stores product information (names, descriptions, ingredients, allergens, images), inventory counts, weekly money reports, and account information for staff and admins (email, display name, role, and assigned store or location).

Public visitors who browse published labels are not asked to create an account. Basic anonymous analytics may be collected to understand which labels are viewed.

Retention & deletion

Product, inventory, and report records are retained for as long as the Figo team needs them to operate the business. If you are a staff member or admin and would like your account removed, contact the Figo team using the address below and we will remove your account and personal profile information.

Contact & reporting an issue

If you believe you have found a security issue, or you have a privacy question, please contact the Figo team. We appreciate responsible disclosure and will respond as quickly as we can.

This page is editable content maintained by the Figo team and may be updated as the product evolves.