Trust, security & privacy
This page is maintained by M&I Investments Group, Inc. to answer common security and privacy questions about our website and services.
Shared responsibility. Security is a partnership. The Lovable platform provides managed hosting, database, and authentication primitives. M&I Investments Group, Inc. configures and operates this application — including access policies, data handling, retention, and customer communications. Clients are responsible for safeguarding their account credentials and for the accuracy of information they submit. This page describes controls currently enabled in our application; it is not a certification or an independent audit attestation.
Access & authentication
Client and admin areas require email/password sign-in. Administrative functions are gated by server-side role checks; client-side role claims are never trusted. Sensitive form submissions and database operations run through authenticated server functions with input validation.
Platform & hosting
This site runs on the Lovable platform with a managed Postgres backend. Database access is restricted by row-level security policies, and privileged write paths execute server-side with least-privilege credentials. This page describes enabled controls — it is not an independent certification.
Data in transit
All traffic to this website and our backend APIs is served over HTTPS/TLS. Webhooks from payment providers are signature-verified before any record is created or updated.
Data collection & use
We collect only the information needed to deliver our services — contact details, documents you submit for review, scheduling information, and communication history. We do not sell personal information. Full details are in our Privacy Policy.
Cookies & analytics
We use strictly necessary cookies for session and form handling, and privacy-respecting aggregate analytics. We do not use third-party advertising or behavioral tracking cookies.
Retention & your rights
Client records, contracts, communications, and recorded consultations are retained for ten (10) years from the date of last engagement. You may request access, correction, or deletion of your personal information at any time by emailing us.
Policies & legal documents
For complete, authoritative terms, please review our policies:
Report a security concern
If you believe you have discovered a vulnerability or have a security or privacy question, please contact us directly. We aim to acknowledge reports within two business days.
M&I Investments Group, Inc. · Iscah Israel, Executive Director
admin@miinvestmentsgroup.com · (302) 206-5221