Security
Where your data lives, and who touches it
Plain answers to the questions a careful owner asks before putting their customer list in someone else’s software.
- Hosting region
- US West (Northern California, AWS us-west-1) for the database; Netlify’s US edge for the site and functions. Your data is not stored in Canada. We say this plainly because some vendors imply otherwise.
- Encryption
- TLS 1.2+ in transit. AES-256 at rest (Supabase). Uploaded documents sit in a private bucket and are served only through short-lived signed links.
- Backups
- Daily backups with 7-day point-in-time recovery (Supabase). Invoice PDFs are regenerated from the record if a file is lost.
- Sign-in
- No passwords. A 6-digit email code or Google. Sessions expire; the old emailed links stop working after their cut-off date.
- Who processes your data
- Supabase (database, US) · Netlify (hosting, US) · Stripe (card payments; card numbers never touch our servers) · Resend (email) · Anthropic (AI drafting, US) · VoIP.ms (texts and numbers, Canada) · Stripe Identity (ID checks; we store only the result, never the images).
- Retention
- While your account is open. After you cancel, 90 days so you can export, then deletion. Uploaded ID documents for a filing are deleted once the filing is done. Text and consent logs are kept 3 years, the CASL record-keeping period.
How AI drafting is used
Ready drafts text (a reply, a follow-up, a headline for your page) by sending only what that draft needs, such as a customer’s message and your list of services, to Anthropic’s API in the US. Nothing is used to train models. Nothing an AI writes reaches a customer without your tap; every draft sits in the approval inbox first. Each account has a monthly AI budget you can see and change in Settings.
Texts and consent
Every text and email Ready sends for you carries your business name and a one-tap opt-out, and marketing-type messages check the consent ledger first (Canada’s anti-spam law). The AI phone assistant, when it launches, will be inbound-only and will say it’s an assistant at the start of every call.
What we don’t do
- Store card numbers, bank credentials or ID images.
- Sell or share your customer list.
- Lock your data in: export everything as CSV, any time, in one click.
Questions: info@prontco.ca. Policies: Privacy · Terms · Status.