We take the security and privacy of your trade secrets seriously. Here's our commitment to keeping your proprietary recipes safe.
Your formulations are protected with the same level of encryption used by banks and financial institutions.
All your data is encrypted in our database using AES-256 encryption - the gold standard for data protection. Even if someone gained physical access to our servers, your formulations would be unreadable.
Every connection between your browser and our servers uses TLS 1.3, the latest encryption protocol. Your data is protected from interception at every step.
We conduct regular security reviews and vulnerability assessments to ensure our infrastructure stays protected against emerging threats.
Currently hosted on Render with PostgreSQL database. We're migrating to AWS for enhanced enterprise-grade security services and compliance certifications.
Passwords are hashed using bcrypt with salt rounds. We never store plain-text passwords - even we can't see your password.
We never share, sell, or monetize your data. No advertising networks, no data brokers, no exceptions. Your formulations stay private.
🚀 Infrastructure Migration: As we migrate to AWS infrastructure, these security measures will be enhanced with enterprise-grade AWS security services including AWS Shield, GuardDuty, and compliance with SOC 2, ISO 27001, and other industry standards.
Your data belongs to you. Period. Not to us, not to anyone else. Here's how we ensure you maintain complete control.
We believe that data freedom builds trust. If we're doing our job right, you'll stay because our tool is valuable - not because your data is trapped. Your success is our success, and that starts with respecting your ownership rights.
We've designed our platform with privacy as a core principle, not an afterthought.
While we need to store your formulation data to provide our service, we've implemented privacy-first practices:
We only collect what's necessary:
Robust security measures to ensure only you can access your formulations.
Passwords are hashed using bcrypt with adaptive rounds. Even if our database were compromised, your passwords would remain protected. We cannot see your password - ever.
Secure session tokens with automatic expiration. Sessions are invalidated after logout or inactivity periods, protecting your account even if you forget to log out.
Each user has their own isolated account. No shared credentials, no account sharing. Business+ plans include multi-user access with proper role-based controls.
Coming soon: Optional 2FA using authenticator apps for an additional layer of security on your account.
Rate limiting on login attempts and account lockouts after multiple failed attempts protect against password guessing attacks.
Coming soon: Email notifications for new device logins and suspicious activity on your account.
Your formulations are backed up and protected against data loss.
💡 Pro Tip: While we maintain robust backups, we always recommend using our export feature to keep your own local backups of critical formulations. Your data, your control!
We believe in open, honest communication about how we handle your data.
We commit to being straightforward about our practices, limitations, and mistakes. If something goes wrong, we'll tell you. If we make changes, you'll know. If you have questions, we'll answer honestly. Building trust requires transparency, and we take that seriously.
Common questions from formulators about keeping their trade secrets safe.
No. Your formulation data is encrypted in our database, and we don't have administrative tools to casually browse user formulations. Technical staff can access the database for maintenance, but all access is logged and monitored. We respect your intellectual property and have no interest in your proprietary recipes.
While no system is 100% hack-proof, we've implemented multiple layers of security to make this extremely difficult. Your data is encrypted at rest with AES-256, so even if someone gained database access, they'd need the encryption keys (stored separately) to read your formulations. We also use intrusion detection, regular security audits, and follow industry best practices.
Absolutely not. We never sell, rent, or share your data with third parties. No advertisers, no data brokers, no market research firms. Your formulations are YOUR intellectual property, not a revenue stream for us. We make money from subscriptions, not from your data.
No. We do not use your proprietary recipes to train AI, machine learning models, or for any other purpose beyond providing you the PIPPS Maker Calc service. Your trade secrets stay secret.
Yes, absolutely. You can export all your data (materials, formulations, costs, vendors) anytime in CSV, JSON, or PDF formats. Just go to your account settings and click export. No approval needed, no waiting period. You can also downgrade to our free tier instead of leaving completely - keep 25 materials and 5 formulations forever.
Yes. We follow GDPR principles including data minimization, user consent, right to access, right to deletion, and data portability. We're committed to complying with privacy regulations worldwide. If you have specific compliance questions, contact dpo@pipps.app.
In the unlikely event that PIPPS closes, we commit to providing at least 90 days notice and ensuring all users can export their complete data. We'd also open-source export tools and provide migration guides to help you move to alternative solutions. Your data won't disappear.
Coming soon! We're implementing optional 2FA using authenticator apps (Google Authenticator, Authy, etc.) for Pro+ plans. This will add an extra layer of security to your account. Expected launch: Q2 2025.
We will only provide user data in response to valid legal requests (court orders, subpoenas) as required by law. We review all requests carefully and will notify users when legally permitted. We do not provide access to law enforcement without proper legal process.
Currently, our servers are in US-based data centers (Render). When we migrate to AWS, we'll offer geographic options for data storage to better serve international users and comply with data residency requirements. All data is encrypted regardless of location.
Planned for 2025. We're setting up a responsible disclosure program and bug bounty to reward security researchers who help us identify vulnerabilities. Until then, please report security issues to security@pipps.app - we take all reports seriously and respond within 48 hours.
Payment processing is handled by Shopify, a PCI DSS compliant payment processor. We never see or store your full credit card number. Shopify handles all payment data securely, and we only receive confirmation that payment was successful.
We're here to help. Your security concerns are important to us.
Security inquiries: security@pipps.app
Privacy questions: dpo@pipps.app
General support: support@pipps.app
Join hundreds of formulators who trust PIPPS Maker Calc with their proprietary recipes.
Start Free - No Credit Card Required Learn More About Features✓ Free forever tier ✓ Export anytime ✓ Bank-level encryption ✓ No data sharing