Security details are also covered in full in our Privacy Policy — this is a plain-language summary of the measures that apply.
Encrypted connections
All traffic between your device and TrackLobo’s servers runs exclusively over HTTPS (TLS). No unencrypted connection is ever accepted.
Sensitive data is encrypted at rest
Tax identification numbers — yours and your clients’ — and the access tokens used to connect Gmail, Outlook, Google Calendar, QuickBooks Online, and Stripe are stored encrypted, using industry-standard authenticated encryption.
Tax IDs are never shown in full
Once a tax ID is saved, no one — including administrators — can retrieve the full number through the app or its API. Only the last four digits, and whether one is on file, are ever shown.
Role-based access
On plans with Custom Roles, an administrator decides exactly which team members can view or manage sensitive records, like invoices or payroll data.
Connected accounts (Gmail, Outlook, QuickBooks, Stripe…)
TrackLobo connects to these providers using OAuth — we never see or store your password for them, and your card or bank details are entered directly with Stripe, never on our servers. You can disconnect any of them at any time from Business Settings.
Signatures
Captured signatures — whether an invoice, change order, or job-completion signature — are stored encrypted and linked only to the specific record they belong to.