Security
Last updated 7 November 2026 · version 2026-11-07
You trust us with your customers’ names, addresses and prices. Here is how we protect them.
How data is protected
- Encryption: all traffic uses TLS; data is encrypted at rest by our database and storage provider.
- Tenant isolation: row-level security in the database means each tradesperson can only read and write their own records.
- Sign-in: Google and Apple sign-in. We never see or store your password.
- Quote links: customers open an unguessable link. We store only a hash of the token, and the link grants access to that single quote or invoice.
- Tamper-evident signatures: a SHA-256 hash of the signed PDF is stored with the signature record.
- Payments: we never handle card or bank details for your jobs. Subscription billing is handled by Apple or Google.
- Staff access: support staff access is role-based, limited to what is needed, and logged in an audit trail.
- Backups: daily, with point-in-time recovery.
Report a vulnerability
If you find a security issue, please email pandeyamitbiz@gmail.com with the details. Please give us reasonable time to fix it before sharing it publicly, and do not access other people’s data. We will acknowledge within 2 business days.
Your part
Keep your phone locked, only share quote links with the customer they are for, and tell us if your phone is lost so we can help you secure the account.