We build inside your accounts and leave nothing that depends on us. Here is how access, credentials and data are handled during and after a project.
Source code is committed to a repository you own. Domains, hosting, databases and third-party services are registered to your company. After full payment, all deliverables belong to you (see the Terms).
We ask for the minimum access needed, prefer invitations over shared passwords, and use separate accounts or roles you can revoke at any time. Access is removed at handover unless you keep a support plan.
API keys and secrets live in your platform's secret store, never in code or chat. We never ask for banking passwords, card numbers or identity documents.
We default to managed, encrypted platforms with automatic backups (for example Cloudflare, Supabase, Neon). Every project ships with a runbook that explains where data lives and how to restore it.
When a system we build processes personal data of your customers, you remain the controller and we act on your instructions. Test data is deleted after acceptance; production data stays in your accounts.
Everything you share about your business is confidential by default under the Terms of Service. We sign your NDA on request and never reuse your materials for other clients.
Our own operations. This site runs on Cloudflare; payments are processed by PayPal and card details never reach our systems; bookkeeping is synchronised to QuickBooks; our phone line is answered by a voice agent and call summaries are kept for 90 days. Questions: [email protected].