Data security

Plain answers about what we keep and how.

• Card payments: handled entirely by Stripe's hosted checkout. We never see or store card numbers.
• Encrypted connection: the whole site is HTTPS-only with HSTS. No ads, trackers, analytics scripts or third-party fonts are loaded (strict Content-Security-Policy).
• Sign-up form: stored in a private, non-public data store at our web host (Cloudflare). It can only be read with a secret key. The form is rate-limited and spam-filtered.
• Files you send: used only to do the job you asked for. Never sold, never shared for marketing.
• Deletion: email us and we delete your details and files; see the Privacy policy for retention periods.
• Access: no logins to your bank, accounting system or email are ever requested.
• W-9s and tax IDs: masked in every report and spreadsheet we send back, and never forwarded to anyone. Please never type an SSN or EIN into an email body; attach the W-9 instead.

Questions or a concern: [email protected].