Trust & Security
This page is maintained by Vegas Asian Massage to answer common security and privacy questions about our booking website and in-room massage service. It describes our current practices and is not a third-party certification or independent audit.
Shared responsibility
Vegas Asian Massage operates this website and our dispatch operations. Our hosting, database, and email infrastructure run on third-party platforms that provide the underlying availability and security controls. We are responsible for how booking data is collected, stored, used, and deleted within our application.
Data we collect
We collect only what is needed to dispatch a therapist to your location. When you submit the booking form we receive:
- Your name and phone number
- Hotel name, optional tower name, and optional room number
- Preferred massage type and requested date
We do not run user accounts, do not store passwords, and do not process payment card data on this website — payment is handled directly between you and the therapist on site.
Application security controls
- All traffic served over HTTPS
- Server-side input validation on booking submissions (Zod schemas)
- Honeypot field and IP-based rate limiting on the booking endpoint
- Database row-level security policies restricting access to booking records
- Secrets and API keys held server-side only — never exposed to the browser
Subprocessors
We use a small number of third-party services to operate the site. Each provider receives only the data necessary for its function:
- Supabase — database, authentication primitives, and serverless functions
- Resend — transactional email delivery for booking notifications
- Tawk.to — live chat widget on the website
- Lovable — application hosting and deployment
Reporting a security concern
If you believe you have found a security vulnerability in this website or have a concern about how your booking information is handled, please email support@vegasasianmassages.com with a description of the issue and steps to reproduce. We ask that you give us a reasonable opportunity to investigate and respond before disclosing publicly.
Related policies
- Privacy Policy — what we collect and how we use it
- Terms of Service — terms governing use of this site and our service
- DMCA Policy — copyright takedown procedure