Trust & Security

User accounts are protected with email/password authentication and optional Google sign-in. Administrative actions are scoped to accounts with an explicit admin role, and account-level financial actions are protected by server-side rules.

Sensitive operations such as withdrawals require server-side validation, per-user rate limits, and a manual approval step.

Customer data is stored in a managed Postgres database with Row Level Security policies that scope reads and writes to the owning user (or administrators where explicitly required). Financial fields are not directly writable by clients — changes go through reviewed server functions.

Data in transit is encrypted via HTTPS/TLS between your browser, our application, and our managed backend.

MaxForex runs on the Lovable Cloud platform, which provides managed hosting, managed Postgres, authentication, and serverless edge functions. We rely on the platform's underlying infrastructure controls; this page does not claim those controls as our own certifications.

We use the following service providers to deliver the product:

• Lovable Cloud — application hosting, database, authentication
• Resend — transactional email delivery
• Public blockchain explorers — read-only transaction verification

If you believe you've found a security vulnerability in MaxForex, please contact us so we can investigate:

• Email: maxforexautomatedtradingroboti@gmail.com
• Telegram: @Maxforex100
• WhatsApp: +1 458-329-1416

Please avoid testing against other users' accounts or data. We aim to acknowledge reports within a few business days.