Data security

Plain answers about what we keep and how.

• Card payments: handled entirely by Stripe's hosted checkout. We never see or store card numbers.
• Encrypted connection: the whole site is HTTPS-only with HSTS. No ads, trackers, analytics scripts or third-party fonts are loaded (strict Content-Security-Policy).
• Sign-up form: stored in a private, non-public data store at our web host (Cloudflare). It can only be read with a secret key. The form is rate-limited and spam-filtered.
• Files you send: used only to do the job you asked for. Never sold, never shared for marketing.
• Deletion: email us and we delete your details and files; see the Privacy policy for retention periods.
• Access: no logins to your bank, accounting system or email are ever requested.
• Owner lists: used only to prepare your statements and reminders. We never collect, hold or move money, so there are no bank details of yours or your owners' for us to hold.

Questions or a concern: [email protected].