Security

Last updated 2026-11-01

In plain English

• Everything you send us travels over HTTPS.
• Your data is encrypted where it is stored.
• You sign in with a licence key, not a password. Keep it private.
• Stripe takes your payment. We never see your card number.
• Found a security bug? Tell us at support@pourtopage.com.

This summary is here to make the page easier to read. It is not the full text. If the two ever seem to differ, the full text below is what counts.

Every sentence on this page is one a customer can check. That is the point of it, and it is why nothing appears here that is not true today.

In transit

All traffic is served over HTTPS, with HTTP redirected. Certificates are issued and renewed automatically.

At rest

Data is encrypted at rest by our database and storage providers.

Access

Accounts are held by licence key. There are no passwords to reuse or leak, and no password reset flow to phish. The trade-off is that anyone holding the key has access, so treat it like one.

Backups

daily, retained 6 days

Payment data

We never receive your card number. Stripe processes payments and is PCI DSS Level 1 certified.

Reporting something

If you find a vulnerability, tell us at support@pourtopage.com. We will acknowledge it, and we will not pursue anyone who reports in good faith and does not access other people's data.

Pour to Page is operated by TBG Strategic Consulting LLC. Questions about this page: legal@pourtopage.com.