Opportunity Scan submissions are sent to IVONAI's own API and stored in our Supabase project rather than being forwarded to a third-party form mailbox.
Security & data protection
Minimum data. Server-side access. No public prospect database.
IVONAI stores Opportunity Scan requests in a protected Supabase table with Row Level Security. Anonymous visitors cannot read customer submissions. Public forms write through a narrow validated server endpoint rather than directly exposing the database.
Customer and prospect data is not exposed through anonymous database reads. Internal analytics access remains server-side/authenticated.
The public scan asks only for the agency website, ICP, geography and work email needed to fulfil the request.
Responsible disclosure
Found a security issue?
Email iwona@ivonai.app. Please avoid accessing data that is not yours, disrupting service, or publishing sensitive details before we can investigate.