Order intake
Tell us about your app
This takes about 5 minutes. Just paid for Security Fix, Fix & Deploy, App Rescue or a Lovable Cloud move? This form is your next step. We also email you a link to it, so you can come back later. After you submit, we'll email the exact invites to send. For Security Fix and Fix & Deploy, the 48-hour clock starts when access is confirmed, not when you submit this form.
Bought only the Launch Pack? You don't need this form. We'll email you within 2 hours (8 AM to 8 PM PT; otherwise by 10 AM PT) to get your Launch Pack started.
Thanks, we got your intake. We reply within 2 hours, 8 AM to 8 PM PT. Requests outside those hours get a reply by 10 AM PT. For Security Fix, Fix & Deploy or App Rescue, our reply lists the exact invites to send. If you haven't paid yet, it also includes a payment link or a quote. For Security Fix and Fix & Deploy, the 48-hour clock starts when access is confirmed, not when you submit this form.
Never send us passwords or keys. If we need a token, we'll ask for a one-time Bitwarden Send link.
Your reference:
Database Check intake
Just paid for the $49 Database Check? This form is your next step. It takes about 3 minutes. A person reviews your database setup read-only (Row Level Security and policies, anon/authenticated grants, storage buckets, Security Advisor findings, and where a service-role key appears) and sends you a red/yellow/green report within 24 hours of working access, or you get a full refund. A person on our team reviews and approves every report before you get it. We change nothing.
The 24-hour clock starts at working access: when we've received your complete script results plus your platform's security findings. It doesn't start at purchase or when you submit this form.
How you'll give us read-only access: run our script, send us the results. We don't log in. After you submit, we email you our read-only script (customer-run-readonly-script.sql) and these steps.
- Paste the whole script into your SQL editor and click Run.
- Supabase: Dashboard → SQL Editor → New query.
- Lovable Cloud: in your project, More → Cloud → SQL editor.
- Download the results as CSV if your editor offers it, or copy them.
- Send them with your platform's security findings (a screenshot of the full list, or a copy):
- Supabase: Dashboard → Advisors → Security Advisor.
- Lovable Cloud: Lovable's security scan (in your project's Security view). Run the scan first if it's out of date.
The script reads only settings and rules (which tables have Row Level Security on, the policies, the grants, which storage buckets are public, risky functions and views). It reads no rows of your app's data and changes nothing. We delete your results within 30 days after we deliver your report. We don't ask for a login or an invite to your Supabase organization.
If your database has more than 25 tables, we'll send you a quote before we start. If you'd rather not go ahead, you get a full refund.
Thanks, we got your Database Check intake. We reply within 2 hours, 8 AM to 8 PM PT. Requests outside those hours get a reply by 10 AM PT. Our reply has the read-only script and the steps to run it.
The 24-hour clock starts at working access (your complete script results and security findings), not when you submit this form. Want the fixes after? Buy one for the same app within 14 days and your $49 counts toward it, so you pay $100 or $200. Use the upgrade link or the one-time code we email you. Already paid full price in that window? Ask us and we refund the $49.
Don't send passwords or keys. We don't need them.
Your reference:
Want the free emailed mini check instead? Email us your request. No mail app? Use this form.