Encryption in transit
TLS for every browser session and server function. Listing payloads are never posted to a third-party form by default.
Trust
Listings contain phone numbers, hours, and sometimes employee names. Treat them like operational data, not marketing collateral.
TLS for every browser session and server function. Listing payloads are never posted to a third-party form by default.
Workspace data is scoped to the signed-in user. Server functions authorize with a verified session, never a client-supplied user id.
Sign-in uses Google or email and password. Sessions are same-origin. Gate viewers inherit a workspace session without extra clicks.
Audit emails, demo requests, and signup fields are stored so we can measure demand and follow up, not to sell a list.
A data processing agreement is available for Growth and Enterprise. We will not claim certifications we have not completed.
Production access is limited to operators who need it to fulfill support. Listing data is not used to train public models.