Security

Client data is stored in Supabase (managed PostgreSQL, US region) and served through Vercel. Payments are handled by Stripe — we never see or store full card numbers, and card data does not touch our servers. Email is sent through Resend, and text messaging through Twilio.

Every table enforces row-level security in the database, so a client account can only read its own records — this is enforced by Postgres, not by application code that could be bypassed. Administrative access is limited to the authorised representative of Lytbub Technologies LLC. Client portal sign-in uses emailed one-time links rather than shared passwords, and each link works once.

Meaningful actions on your data are recorded with a timestamp and an actor, so we can answer “who changed this, and when”. We record when you accept our Terms and Privacy Policy, including the version and time, because that record is what makes the agreement provable. Consent to receive text messages is recorded separately with its source.

We do not sell client data. We do not sell, rent, or share mobile numbers with anyone for their own marketing. We do not use client data to train AI models. We do not run third-party advertising trackers on client portals.

AI-assisted drafting and monitoring is part of how this studio works, and it is disclosed rather than hidden — see how we work. Content generated about your project is reviewed by a human before it is sent to you. Client data is not used to train any model.

We are a small studio and will not claim certifications we do not hold. We are not SOC 2 or ISO 27001 certified. We do not currently offer single sign-on or hardware-key enforcement on client accounts. If your procurement process needs something specific, ask — a straight answer is faster for both of us than discovering the gap later.

Security: security@lytbub.com · Privacy: admin@lytbub.com
Lytbub Technologies LLC, 2325 East Camelback Road, Suite 400, Phoenix, Arizona 85016