← 1Biz · Privacy · Terms · Billing · EULA · AUP · Cookies · AI · Retention · Security

1Biz Security Policy (Customer-facing summary)

Effective date: August 24, 2026 · Fieldnote.Ai LLC d/b/a 1Biz · Canonical legal package

Related: Privacy Policy · Terms of Service

1. Overview

1Biz is built on managed cloud infrastructure. We apply security controls appropriate to a multi-tenant SaaS field-service application.

2. Core controls (as implemented)

• Transport encryption: HTTPS/TLS for apps, websites, and APIs.
• Authentication: Supabase Auth (email/password); session-based access to the app.
• Authorization: Business membership checks; Employee User permission flags; owner-only surfaces.
• Tenant isolation: Database row-level security policies designed to isolate Business-scoped data. No control set guarantees perfect isolation.
• Secrets: Server-side API keys (Stripe, Anthropic, Resend, etc.) kept in Edge/environment secrets—not shipped as public client secrets for privileged operations.
• Payments: Card data handled by Stripe; 1Biz does not store full PAN/CVC.
• Abuse controls: Rate limits on sensitive public and AI endpoints; account deletion rate limits.
• Monitoring: Optional Sentry error reporting.

3. Your responsibilities

• Protect account credentials and team join codes.
• Account Holders should set least-privilege team permissions.
• Use strong device passcodes and keep OS/app updated.
• Configure Stripe Connect and review payouts in Stripe.
• Only upload data you are authorized to process.

4. Incident contact

Suspect unauthorized access? Email get1biz.support@gmail.com promptly.

5. Limitations

No system is perfectly secure. This Policy does not guarantee uninterrupted security or imply certifications we have not published.

6. Updates

We may improve controls without prior notice; material customer-facing changes will be reflected in the Privacy Policy / this summary.

7. Contact

get1biz.support@gmail.com

Fieldnote.Ai LLC d/b/a 1Biz