Security
Your practice holds your clients' plans, numbers and mail. Here is how it's kept, in plain English.
Sealed practices
Every row in the database belongs to one practice, and every query goes through one layer that scopes it to yours. It isn't left to each screen to remember. As the platform owner, we can't see inside a practice either.
Roles and permission levels
Practice owner, associate and assistant on your side, each seeing only what their role allows; assistants never see financials or settings. On the client side, each client sees only their own company, and their team members get one of five permission levels: viewer, member, manager, senior leadership or client owner.
Encrypted tokens
Your Claude key and every Google, Microsoft, bank and processor connection are encrypted in the database and never shown again in full. Sign-in links and signing links are masked in the logs.
Nightly backups
The whole database is backed up every night to separate storage, and every release that changes the database waits for that day's backup first.
Passwordless portal links
Clients sign in with a link sent to their own email, so there are no client passwords to reuse or leak. Your team signs in with Google or Microsoft.
Where data lives
The app and its database run on Railway in the United States. Files and backups are kept in Google Cloud Storage.
Nothing sent without you
Mail to clients waits in your sending queue until a person approves it, and anything the AI drafts is a proposal until someone accepts it.
Your money stays yours
Client payments go through your own merchant account. Bank feeds come through Plaid; your bank sign-in never reaches us.
Northgate Paper ops
Send-as checked · replies collected
Front Range Bank
Business checking ··4417 · $55,718.80
What a connected Google account is used for
Each permission is asked for separately, only when you turn on the feature that needs it, and you can disconnect at any time in the app or in your Google account.
- Sign in
- Your name and email address, to sign you in. openid, email, profile
- Send approved mail
- Sends mail from your own address, only after a person approves each message, or when a client asks for a sign-in link. gmail.send
- Confirm your sending address
- Reads your "Send mail as" list, so mail never goes out from the wrong address. Changes nothing. gmail.settings.basic
- Read replies and file client mail, when switched on
- Reads replies on threads the app started. If you also turn on filing, it looks at new mail's senders and recipients and keeps only mail with your contacts or their companies. Anything else, personal mail included, is never stored. gmail.readonly
- Watch a notes folder
- Reads meeting-notes documents in the one Drive folder you choose, to propose contacts, action items and tasks for your review. Never writes, moves or deletes. drive.readonly
- Read a KPI sheet
- Reads the one spreadsheet tab a scorecard feed points at. Never writes. spreadsheets.readonly
- Calendar events
- Shows your meetings with a contact or company, and adds an event to your own calendar when you click Add to calendar. Nobody is invited. calendar.events
- Business reviews
- Reads one location's Google reviews and rating, daily, for a client's scorecard. Never replies, edits or deletes. business.manage
Execs NOW HQ's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What a connected Microsoft 365 account is used for
Built and switching on soon. The same rules apply.
- Sign in
- Your name and email address, to sign you in. openid, email, profile, offline_access
- Send approved mail
- Sends mail from your own address, after a person approves each message. Mail.Send
- Read replies and file client mail, when switched on
- The same rules as Gmail: replies to threads the app started, and only mail with your contacts if you turn filing on. Mail.ReadBasic, Mail.Read
- Watch a notes folder
- Reads meeting notes in the one OneDrive folder you choose. Files.Read
- Calendar events
- Shows your meetings with contacts, and adds events to your own calendar when you ask. Calendars.ReadWrite
Found a problem? Write to info@execsnowhq.com. See also the privacy policy.