Your business deserves trust.

Account and workspace protection

Firebase Authentication handles sign-in. Server requests check the current account and permissions, including disabled accounts. Database rules separate customer workspaces, and administrative actions are recorded. Authorized support staff can access information when necessary to provide service, investigate security issues, or meet legal obligations.

Authenticator setup and workspace enforcement are available through Account security when enabled for the platform. Enrollment is personal: a badge does not mean every account has enrolled. Check your account’s protection.

Safer signups and delivery

Signup forms use rate limits, a hidden spam field, and time-limited signed form checks. Giveaways can limit entries to one per normalized email. Owner and administrator test signups are kept separate from real leads and giveaway totals.

New coach marketing choices require an email confirmation before appearing as confirmed subscribers. Unsubscribe controls are separate from resource delivery. Verified provider events report delivery outcomes and block addresses reported as bounced, complained, or suppressed. Delivery to a mail server does not guarantee inbox placement.

Clear boundaries around your information

Core infrastructure uses Google Firebase and Google Cloud. Resend sends service emails. Payment services are provided by Stripe where configured. Providers receive information needed for their part of the service. We keep credentials in managed server secrets. Public funnel images, videos and downloadable freebies are intended for sharing; do not upload private client documents as public assets.

Read the full Privacy & Email Policy, including marketing choices and requests to access, correct or delete information.

Check before you share

Launch Check records checks against the saved version of a funnel. Coaches can review mobile pages, inspect links, play videos, and send a test signup to their own signed-in address. Results distinguish real signups, marketing confirmations, queue acceptance, and provider delivery events.

Independent website checks

Growth Hub’s main website is enrolled in TrustedSite’s Certified Secure service. The provider’s certificate shows the current verification status and scope. This checks the website; it is not a penetration test, an audit of every coach workspace, or a guarantee against every attack.

We do not claim SOC 2 certification, HIPAA compliance, or that a security seal makes a site invulnerable.

Report a concern

Email [email protected] with the affected page, time, and steps to reproduce. Please omit passwords, private keys, and other people’s personal information. We will investigate and follow up. This address also handles account recovery and privacy requests.