BUILDSPRIG
Security
The safeguards used by the BuildSprig client portal.
Sign-in and sessions
Sign-in credentials are verified on the server. Session cookies are marked HttpOnly, Secure and SameSite. Sign-in tokens expire and are stored as hashes.
Project access
Project briefs and messages are stored in a Cloudflare database. Each customer can access their own project; the configured owner account can manage client projects.
Payments
Card details are entered on Stripe-hosted checkout pages. The BuildSprig website does not store your card number.
Report a concern
Contact BuildSprig with the affected URL and steps to reproduce. Do not include passwords, payment details or other people’s private data.