Security-first foundation for websites and sales data.

Account Security

• Email/password and Google login for account access.
• Role-based access controls for site-level permissions and scoped account data.
• Server-side token validation before protected actions.

Platform & Infrastructure

• Managed infrastructure with continuous updates and patching.
• Secure API integrations for billing, publishing, and domain flows.
• Operational monitoring for high-risk workflows and failures.

Data Handling

• Data is scoped to authorized users, associated sites, and CRM ownership.
• Sensitive operations are performed from trusted server routes.
• Audit-relevant events are tracked for billing, deployment, import, and support paths.

Responsible disclosure

• Send details to [email protected] with subject line: Security Report.
• Include reproduction steps, impact, and proof-of-concept if available.
• Allow us reasonable time to validate, fix, and deploy mitigations.
• Avoid public disclosure until remediation is confirmed.

Security contact

For urgent security concerns, include your account email, site ID, and a clear impact summary. For Sales issues, include affected import/contact context where safe to share so our team can triage faster.