Privacy

Account email and password hash stay in the local database on this machine. The password is not stored in the clear. The session secret and the Stripe key, when one is supplied, stay in files mode 600.

Job photos stay on this machine. The app sends them to the foreman-vision engine on 127.0.0.1. The engine does not fetch a public address.

The contact form stores the message locally. It does not send email.

Admin logs record the action, the time, and the account id. They do not record passwords or keys.