Security

Built to keep your business and your customers safe

Security is not an add-on. Every site and every lead inbox gets all of this by default.

01

Encrypted everywhere

Every page is served over HTTPS from Cloudflare, with strict transport security so browsers never fall back to an insecure connection.

02

Locked-down pages

A content security policy lets pages load only from your site, and no other website can embed yours in a frame, which stops click-jacking.

03

Private by sign-in

Your review area and your lead inbox open only for the email that bought the site. Each business sees only its own leads.

04

Bots and spam kept out

Forms use Cloudflare’s bot check, a hidden trap field and rate limits. Visitor network addresses are stored only as one-way fingerprints.

05

Your email keys are encrypted

If a business connects its own email account, the key is stored encrypted and is never shown again.

06

Our own accounts are protected

The accounts we use to build and host your site have two-step login turned on.

Ready when you are

See your website before you pay anything, or get a receptionist that never misses a call.