Security & Trust

Your data, handled with care.

We take security seriously so you can measure, estimate, and store your business data with confidence.

How we protect your data

Security by design

Encryption

Data is encrypted in transit (HTTPS/TLS) and at rest through our infrastructure providers.

Trusted infrastructure

Built on Google Cloud / Firebase for authentication, database, hosting, and serverless functions.

PCI-compliant payments

Payments are processed by Stripe. Full card details are handled by Stripe — never stored on our servers.

Access controls

Authentication, least-privilege access, and separation of production environments protect your account and data.

Vetted sub-processors

We use a small set of reputable providers under data-protection terms, and disclose them in our DPA.

Clear data handling

You own your data. We process it only to provide the Service, and honor deletion and access requests.

Questions about security?

We're happy to walk your team through how we protect your data.