TRUST · SECURITY

🔒 Encrypted in transit & at rest 🔑 No password database 💳 We never see your card number 📦 Export everything, anytime ↩️ 30-day money-back guarantee

Your data is yours

Your price book, projects, and estimates are private to your account — no other customer can see them. Account isolation isn't a promise, it's enforced in code and covered by automated tests that run before every release (including tests that try to forge another account's identity — and fail).

We don't sell your data, we don't share it with third parties, and we don't use your price book for anything other than running LVToolbox Pro for you. We don't look inside individual accounts except when you ask us for support, or where it's necessary to keep the service running safely and lawfully.

You're always in control: export your projects and price book anytime, or permanently delete your account from Account settings — no email required, no retention games.

No passwords to steal

LVToolbox Pro has no password database, because it has no passwords. You sign in with a one-time code sent to your email. There is nothing for attackers to crack, leak, or reuse from another site's breach. Sign-in attempts are rate-limited, and sign-in links can't be consumed by corporate email scanners.

Payments: handled by Stripe, not us

Subscriptions are processed by Stripe, the same payment platform used by millions of businesses. Your card number goes directly to Stripe — it never touches our servers, and we couldn't store it if we wanted to. Webhooks from Stripe are cryptographically verified before we act on them.

Where your data lives

The app runs entirely on Cloudflare's global infrastructure. Data is encrypted in transit (TLS) and at rest. Before any database change we take a point-in-time recovery bookmark, and every release is deployed with a tested rollback target — boring, disciplined operations, on purpose.

Client signatures & proposals

Proposal sign-off links are unique, unguessable URLs. When your client signs, the acceptance is recorded server-side with a timestamp, and your sent proposals are snapshotted — a signed price never silently changes, even if you update your price book afterwards. Public proposal pages are served with strict security headers that neutralize script injection.

AI features & your data

The AI estimator and import assistant send only what they need to do the job — your job notes and photos for an estimate, or the column headers and a few sample rows when mapping a price-list import. AI runs are metered, rate-limited, and can be switched off for your whole organization at any time. AI output is always a draft: nothing touches your quote until you review and accept it.

Found a security issue?

Tell us first: support@lvtoolbox.com with "SECURITY" in the subject line. We read every report, respond fast, and credit responsible disclosure if you'd like the mention.