Security

1. How your data is stored

• Traffic between you and LaunchBird is encrypted in transit with HTTPS/TLS.
• Data and file uploads are encrypted at rest by our infrastructure providers.
• LaunchBird runs on established cloud infrastructure. We do not operate our own servers or data centers.

2. Access control

• Access to production systems is limited to the people who need it, using individual credentials and multi-factor authentication.
• We look at customer workspace content only when you ask us to for support, or when we must to investigate an incident.
• Inside your workspace, roles and permissions let you decide who sees financial information and which projects a contractor can reach.

3. Client portals

Portal users only ever see what you publish for their client: updates, deliverables, shared files, accepted proposals and invoices. Internal tasks, drafts, comments and other clients' work are never exposed to them.

Portal access is managed per client, and you can revoke it at any time.

4. Backups and continuity

• Databases are backed up automatically on a regular schedule.
• Backups are encrypted and retained for a limited window, then aged out.
• We monitor availability and errors so we can respond to problems quickly.

5. Payments

Subscription payments for LaunchBird are handled by a third-party billing provider. We do not store full card numbers.

LaunchBird does not process the invoices you send your own clients. It records what has been invoiced and paid so your balances stay accurate; the money moves wherever you already collect it.

6. Your controls

• Use roles and permissions to limit access inside your workspace.
• Choose exactly what is published to each client portal.
• Export your data, and delete content or your whole workspace when you want to.

7. Reporting a vulnerability

If you believe you have found a security issue, contact us with the details and steps to reproduce. We will acknowledge your report and keep you updated while we work on it.

Please do not test against other customers' workspaces or client portals, and do not access data that is not yours.

8. What we do not claim

LaunchBird does not currently hold third-party security certifications such as SOC 2 or ISO 27001. We would rather say that plainly than imply otherwise, and we will update this page if that changes.