Your data, protected
Security
Last updated 8 September 2026. This page describes our current practices and will be updated as the product evolves.
Transport security
All traffic to buildmole.com is served over HTTPS, with HSTS enabled.
Data storage
Data lives in Convex, our database provider, which encrypts data at rest. Access is restricted to BuildMole's own operator.
Authentication
Sign-in is handled by Better Auth. Passwords are hashed and never stored in plain text. Sessions use secure, httpOnly cookies.
Payment security
All payment details are handled directly by Stripe. BuildMole's own servers never see or store your card number.
Infrastructure
BuildMole is hosted on Cloudflare's edge network, which includes DDoS protection and a web application firewall.
Responsible disclosure
Found a security issue? Email hello@buildmole.com and we'll respond as quickly as we can.