Privacy & Security

Phoenix Portal protects every subscribing company's information and their customers' information. This page explains exactly how.

What we protect

Personal, financial, project, signature, payment, insurance, tax, photo, document and communication information belonging to you and your customers.
Company KPIs, employee, supplier and payout records that belong to your business only.

Encrypted in transit (HTTPS/TLS) and encrypted at rest in the database and file storage.
Secure authentication with optional two-step verification (authenticator app).
Role-based permissions for owners, employees, customers and suppliers.
Automatic backups, session protection with inactivity sign-out, audit logs and continuous security monitoring.
Photos and documents live in private storage — never in a public bucket or public URL.

Every record is bound to the owning account and enforced by database-level row security, so one business can never see another business's data.
Customers see only their own file. Employees see only what their role authorizes. Suppliers see only the order sent to them.

We never sell, rent, share or expose your information, and never use it for advertising or unrelated purposes.
No developer, employee, vendor or outside party accesses a subscribing owner's private information unless it is strictly necessary, authorized by the owner, logged, and covered by confidentiality requirements.
Your data is never deleted by an update or maintenance task — deletions are recoverable from Trash and only happen when you confirm them.

Turn on two-step verification, set inactivity sign-out, sign out of all devices, and review your security activity log at any time from Security & Privacy inside your account.
You decide who is authorized. Access can be granted and removed by you at any time.