Your data, handled with care.
We take security seriously so you can measure, estimate, and store your business data with confidence.
Security by design
Encryption
Data is encrypted in transit (HTTPS/TLS) and at rest through our infrastructure providers.
Trusted infrastructure
Built on Google Cloud / Firebase for authentication, database, hosting, and serverless functions.
PCI-compliant payments
Payments are processed by Stripe. Full card details are handled by Stripe — never stored on our servers.
Access controls
Authentication, least-privilege access, and separation of production environments protect your account and data.
Vetted sub-processors
We use a small set of reputable providers under data-protection terms, and disclose them in our DPA.
Clear data handling
You own your data. We process it only to provide the Service, and honor deletion and access requests.
Documents & policies
Need a signed DPA or NDA for your organization? Contact us and we'll be glad to help.
Questions about security?
We're happy to walk your team through how we protect your data.
