Security & data
How we look after your data.
A plain description of where your information lives, who processes it and how you stay in control of it.
Where your data is stored
Your account, business answers, plans, message drafts and recorded results are stored in our application database, hosted with Render in the United States on a private disk that is backed up by daily snapshots. Every connection to the app and the API uses HTTPS.
Passwords and sign-in
We never store your password itself, only a salted scrypt hash of it. Sign-in sessions use random tokens, and we keep only a hash of each token. If you connect a Facebook Page for Autopilot, its access token is encrypted (AES-256-GCM) before it is stored.
Payments
Payments are processed by Stripe. Your card details go directly to Stripe and never reach our servers; we receive only what we need to know which plan you bought and when it renews.
Services that process your data
- Render hosts the API and database.
- Lovable hosts the website and runs the AI drafting features through its AI gateway.
- Lovable Cloud (Supabase) stores messages sent through the website contact form: your name, email and message.
- Stripe processes payments.
- Resend sends account emails, such as password resets and the optional weekly summary, and forwards contact-form messages to our inbox.
- D-ID provides the LilyBee video advisor on Agency plans, only when you start a session.
- Meta receives the posts you approve, only if you connect a Facebook Page to Autopilot.
Text you send to an AI feature (for example a coach question or a draft to rewrite) is sent to the AI model to produce the answer. Recorded results are aggregate counts only: we never ask for your customers’ names or contact details.
Export or delete your data
You can download everything in your workspace at any time from Settings → Export your data. To delete your account, go to Settings → Delete account: your login, businesses, plans and results are removed from the live database straight away. Copies in earlier backup snapshots expire on the hosting provider’s normal schedule. If a subscription ends, your workspace stays readable and exportable for 90 days, then is deleted. See the privacy policy for the details.
What we don’t claim
We are a small team. We don’t hold security certifications such as SOC 2 or ISO 27001, and we won’t claim to until we do. If you find a security problem, please email hello@revenueandpurpose.com and we will reply as quickly as we can.