Free analyses are processed transiently and are not saved to your account unless you choose to save them. Customer names are masked before processing.
Most SaaS tools ask you to upload your customer list, then promise to “keep it safe.” We built Margin Levers differently. Your customer names are hashed in your browser before anything is sent to our servers. The AI that generates your insights sees pseudonyms, not names. The reports you read are translated back to real names by your browser, using a key only you control.
Your Browser
ACME Corp — $48K
Joe's Pizza — $12K
Our Servers
Customer_a1b2 — $48K
Customer_c3d4 — $12K
AI Analysis
“Customer_a1b2 is your biggest profit drag”
Your browser decrypts back to real names — we never see them
Real names stay on your device. Numbers are what we analyze. You see real names in your reports because your browser translates them back — we never can.
AI routing note:Margin Levers uses frontier AI models to generate insights. We use whichever model produces the highest-quality output for a given task, and we update that routing as the frontier moves. Whichever model handles your analysis, it receives the same hashed input — never the real names.
Your private key is encrypted with a passphrase only you know, using Argon2id and AES-GCM. We store the encrypted blob so you can use Margin Levers on multiple devices. We cannot read it. A breach of our database would yield blobs that are only as weak as your passphrase — and we've made that brute-forcing expensive by design.
If you want local recovery mode with no encrypted recovery blob stored on our servers, enable Recovery Phrase Mode in Settings.
Attackers get hashes, numbers, and encrypted blobs. No customer names published.
We hand over hashes and numbers. We cannot hand over customer names.
Log in from original device to reset, or start fresh — new analyses work, old ones show pseudonyms with an Unlock prompt.
Old analyses stay pseudonymized. New analyses work. Honest worst case.
Export all analyses with real names — your browser still has the key.
Your customer list is the single most sensitive asset a B2B SaaS founder owns. Every other tool in the profit analysis category asks you to upload it and trust their promise. We don't think you should have to.
There is a real cost to this architecture. It's harder to debug customer support tickets, harder to do internal research, harder to build some kinds of cross-customer features. We think those tradeoffs are worth it.
Free analyses are processed transiently and are not saved as analyses. Processing may involve server-side services, but customer names are masked and operational logs may be retained for security and reliability.
Free analyses are not saved as analyses unless you choose to save. Customer names are masked before processing.
Saved analysis data is encrypted in transit and at rest. Sensitive identifiers are masked before storage.
All data stays in the United States. Supabase US region, Vercel US edge, US-based AI processing. No cross-border transfers.
Delete your data anytime. No retention periods, no backups we 'forgot' about. When you delete, it's gone.
Not a policy promise—a mathematical guarantee. We cannotread your customer identities because we don't possess the key. You hold the only one.
Acme Corp
$50,000 revenue
Segment A
CUST_A7F3
$50,000 revenue
Segment A
CUST_A7F3
$50,000 revenue
Segment A
The mapping from CUST_A7F3 → Acme Corp exists only in your browser.
Your browser creates a unique RSA-2048 encryption key that never leaves your device
Customer names are encrypted before any data touches our servers
We store only anonymized IDs (CUST_XXXX) alongside financial data
Your browser decrypts names on-the-fly for display—we never see them
If you clear your browser data, you'll need to recover your customer name mapping. We recommend downloading a key backup when you first connect your data.
No vague promises. Here's exactly what data we have access to.
Without AI features: All processing happens in your browser. Zero data transmitted to our servers.
With AI features: Customer data is sent to our AI provider with your explicit consent. See AI disclosure below.
Why: We need minimal data to operate the service. AI features require sending data to generate insights.
A visual walkthrough of what happens when you upload data.
CSV parsed & validated locally
AES-256-GCM with session key
Encrypted blob only (if saved)
Anonymized aggregates only
Important: When you use AI-powered insights, we send customer data to our AI provider to generate personalized recommendations. You will be asked for consent before any AI features are used.
What AI receives (with your consent):
AI provider's data handling:
No AI? No problem. All non-AI features (profitability analysis, exports, segmentation) work entirely in your browser with zero data transmission.
How we ensure your historical strategic context remains isolated, secure, and private.
Our “Executive Memory” uses a specialized vector database architecture with mandatory tenant-ID scoping.
We sanitize your data before it ever enters our long-term memory system (RAG).
For the security-conscious. Here's exactly what we implement.
We haven't completed a formal SOC 2 audit yet. But we've built and automated the security controls that SOC 2 evaluates — and we verify them weekly. Here's exactly what we check.
We don't roll our own crypto or host our own servers. We build on industry-leading platforms with proven security track records.
Database & Auth
Hosting & Edge
Payments
Your data, your rights. We comply with major privacy regulations.
All data processing and storage occurs exclusively within the United States. No customer data leaves US jurisdiction at any point in the pipeline.
Supabase Postgres hosted in US region (AWS us-east-1)
Vercel US edge network with US-based serverless functions
AI processing via US-headquartered and US-hosted providers
Stripe US infrastructure — PCI DSS Level 1 compliant
No cross-border data transfers. Your financial data, customer identifiers, analysis results, and AI-generated insights are processed and stored entirely within US-based infrastructure. This applies to all tiers — free, Growth, and Enterprise.
We take security seriously. If you have questions, need a DPA, or want to report a vulnerability, we're here to help.
Found a vulnerability? Let us know.
