We treat account access and submitted questions with care. This page describes current safeguards without claiming a certification or an independent security audit.
Accounts and sessions
Supabase handles account authentication. Authentication cookies are HTTP-only and configured for secure transport outside local development. Sessions can expire and require sign-in again.
Application boundaries
Provider credentials stay on the server. Browser chat history is scoped to the requesting owner. Durable usage counters and concurrent reservation checks support the free allowance. Input limits and request controls help protect service capacity.
Data connections
The configured database connection verifies TLS certificates. Public deployment still requires correct HTTPS and hosting settings. No public deployment or security certification is established simply by this page.
What you can do
Use a unique password, keep verification links private and avoid sharing sensitive personal, payment or confidential business details in chat. We will never need your password or an OTP in an email to support.
Report a concern
Email support@mandibhavindia.com with a concise description, affected page and steps to reproduce. Do not access other users’ data, disrupt the service or send secrets as evidence. This is a reporting channel, not a paid bounty programme.
Service: Mandi Bhav India · Contact: support@mandibhavindia.com
Operator contact: Mandi Bhav India
Manasa, Madhya Pradesh 458110, India