Security & privacy
You're handing a piece of software your income and your line of work. Here is what we do about that — stated as capabilities that don't exist rather than promises you have to take on faith.
We never store your content
There is no upload for photos or video anywhere in the product. Receipts, invoices and contracts only. This isn't a setting that could be changed or a policy that could be revised — the capability isn't built, so there is nothing to leak, subpoena or mishandle.
We never ask for your platform passwords
No logins, no OAuth into your creator accounts, no two-factor codes. You enter income yourself or import a statement you downloaded. Anyone who asks for those credentials — software or agency — is asking for control of your entire business, and it is the fastest way creators lose everything. Our contract reviewer treats a credential-transfer clause as one of the most serious things an agreement can contain.
We never touch your money
No payouts, no escrow, no holding balances. Your earnings go from the platform to your bank exactly as they do now. We read numbers you give us. The only payment we process is your own subscription.
Your legal name is kept separate
Stage name and legal name are different fields on purpose. The legal name is optional, is used only where a tax calculation or a DMCA notice genuinely requires it, and is never displayed anywhere else in the product. Sensitive identity fields are encrypted at rest.
Discreet mode
A neutral page title and a muted theme, so you can do your books on a train, in a waiting room, or anywhere else without explaining yourself. Your card statement shows a neutral software descriptor too.
You can leave with everything
Export your whole financial history as plain CSV whenever you want, and delete your account yourself without emailing support. Deletion is permanent. It would be strange to build the anti-lock-in tool and then lock you in.
Contracts you upload are purged
Stored so you can reread the report, then automatically deleted — and you can delete one sooner yourself, immediately. We never use uploaded contracts to train anything. If you'd rather no file existed at all, paste the text instead; it works identically.
No third-party tracking
No advertising pixels, no data brokers, no analytics that ship your URLs to someone else. We run our own first-party analytics to see which pages get used, and that's it.
The technical basics
Everything over HTTPS. Passwords hashed, never recoverable. Production access restricted and logged. Regular backups.
More detail in our privacy policy. Questions? Ask us — you don't have to identify yourself.