Security and your data
You are about to put your whole business into this. Here is exactly where it goes and who can reach it.
Where your data lives
Your account, your customers, your jobs and your files are stored with Supabase on managed Postgres, and the application runs on Vercel. Both encrypt data in transit and at rest.
Card numbers never reach us. Subscription payments go straight to Stripe, and all we hold is a customer reference and whether you are paid up.
One company cannot see another
Every row of business data carries the company it belongs to, and the database enforces that boundary itself with row-level security — not the application code, which is the layer that gets a bug in it.
That means a mistake in a page or an API route cannot hand one roofing company another one's leads. The database refuses the read.
Who on your team sees what
People you invite join as members. Admins additionally see the money: financials, expenses, crew pay and billing.
You can remove someone's access at any time from your team settings, and their invite link stops working.
Who at RidgeSync sees it
We look at your account data to run the service, to fix a fault, or when you ask us to help with something. Nothing else.
We do not sell it, we do not rent it, and we do not use your business records to train AI models.
The AI features
Your data is sent to a model only when you use an AI feature — reading a report, drafting a message, asking about your books — and only to answer that request. It is not retained for training.
The public assistant on this marketing site has no access to any account. It only knows about the product.
Getting your data out
The CSV export of your financial ledger sits deliberately outside the paywall, so a lapsed card can never lock you away from your own records. Ask us and we will send a fuller copy of your account data within 30 days at no charge.
Ask us to delete the account and we delete it.
What we do not claim
We are not SOC 2 audited and we do not have a contractual uptime SLA. Saying otherwise would be easy and untrue.
If either becomes something our customers need, we will do the work rather than the wording.
Reporting something
If you think you have found a security problem, email us and we will take it seriously and reply. Please give us a reasonable chance to fix it before publishing it.