Your numbers deserve real protection.
Financial data is sensitive, so we treat it that way. Here is exactly how TrueProfit keeps your account private, isolated and in your hands, described honestly and without jargon.
How your account is protected
Six practices that are true of the product today, not a wishlist.
Identity handled by Clerk
Sign-in runs through Clerk, a dedicated identity provider with MFA support. TrueProfit never stores your password.
Your data is isolated
Every record is scoped to its owner and business, and access is authorization-checked on the server. You only ever see your own data.
Encrypted in transit and at rest
Every request runs over HTTPS with HSTS. Integration tokens, such as your Shopify connection, are encrypted at rest with AES-256-GCM.
Validated and hardened
Every endpoint validates its input on the server before anything is saved, behind strong HTTP security headers including CSP, HSTS and X-Frame-Options.
Verified webhooks, server-only secrets
Incoming webhooks are verified by signature before they are trusted. Secrets stay on the server and are never shipped to the browser.
Your data is never sold
We never sell your data and work with no data brokers. We use marketing pixels (Meta, TikTok) only after you accept cookies, and never to sell your numbers or build a profile of them for anyone else.
Your data, your control
Protection means nothing if you cannot leave. You can take everything out, or remove it entirely, at any time.
Export everything
Download your transactions to CSV and generate a clean profit and loss report whenever you want. There is no lock-in.
Delete it all
Close your account at any time and your data is removed with a full cascade. When you leave, you take everything with you.
Report a vulnerability
Found something that looks off? We want to hear about it. Email us at support@trueprofit.ca with the details and steps to reproduce, and we will get back to you. Please give us a reasonable window to investigate and fix an issue before disclosing it publicly.
See your real number, kept safe
Set up your first business in under a minute. No credit card to start, and your data stays yours from day one.