Legal

Security

Last updated November 7, 2026

How StartupSend keeps your company's reports safe, who can see them, and how you leave with all of it. In plain words, and only what is true today.

Where your data lives

On Cloudflare, in the United States: your records (projects, reports and readings, their history, people and templates) in Cloudflare's D1 database, and your photos, signatures, logo and PDFs in Cloudflare's R2 file storage. Everything travels encrypted (HTTPS only, and browsers are told never to use plain HTTP), and Cloudflare encrypts what it stores.

Every page carries strict security headers: the app runs only its own code and Software MCP's small error-report script, and no other site can frame it.

Backups

Every night StartupSend copies all of your company's records to separate storage on Cloudflare. We keep the last 30 nightly copies and one copy from each of the last 12 months; older copies are deleted. Cloudflare's database also keeps a running history of its own, so it can be put back to an earlier point in time (up to 30 days back).

Photos are not in the nightly copy. Photos, signatures, logos and the PDFs you sent are stored once, in Cloudflare R2, which keeps each file in several places, and each nightly copy points to them. While your account is open StartupSend never deletes them: removing a photo or a report only hides it, and the Trash brings it back. Your own copy of everything, photos included, is one download away (below).

Older history. A report's history and the activity on a job older than 30 days move to long-term storage. Nothing is lost: History, the Activity list and your download still show all of it.

Who can see what

• Admin: everything in your company, including people, brand, billing, support access and the Trash.
• Office: projects, equipment lists, templates, review and sending.
• Field tech: the reports to fill on site.
• Reviewer: reviews reports, comments, approves or returns them, and sends.
• Your Cx provider: only the reports on the review link you send them, with no account. A link expires, and you can turn it off at any time.
• Other companies: nothing. Every request is checked against the company it belongs to.
• StartupSend support: only while your admin has support access switched on (it is on during the free trial), with every visit, page opened, download and change in your Access log and an email to your admins when support opens the account. While it is off, only in an emergency, with a written reason, for 2 hours at most, emailed to your admins at once. Support can never change the switch. The details.
• AI: nothing, unless a tech uses Read the tag or your company switches on an AI check; then only the photos and notes it reads for you (who processes what). A Claude or ChatGPT connection works as the person who connected it, with only what their role can see and do, and every change it makes says which app made it.

Signing in

People sign in with a one-time email link that lasts 7 days, or a password. Passwords are never kept as typed: only a salted hash (PBKDF2, 100,000 rounds). After 5 wrong tries the account waits 15 minutes. A sign-in keeps a secure cookie that scripts cannot read; signing out ends it, and an admin removing someone ends all their sign-ins at once.

A sign-in link or temporary password an admin makes for someone is shown on the Team page ("Sign-in link made by Dana"), the person is told, every change made with it says so in the report's history, and a signature made with it says so on the PDF.

Every change is kept

Each save keeps what changed, who made it and when, so any report can be rolled back. Nothing is deleted for good: the Trash brings projects, reports and templates back.

Payments

Card payments go through Stripe. Your card number goes straight to Stripe; StartupSend never sees or keeps it.

Leaving with your data

Your admin can download all of it at any time from the Company page: one ZIP (in parts for a large company) with a PDF of every report, every PDF you sent, a spreadsheet per equipment type, every photo and signature, your logo, all your records and a README that says what is where. After your plan ends we keep your data 90 days so you can still download it or come back, then delete it, backups included, within 30 days.

Found a problem?

Tell us from the contact page, or with Problem or idea? in the app's menu.