Before someone touches your digital presence, know what they can touch.

Your domain is registered to you. Your Google Business Profile, analytics and social accounts are yours; when we operate them, we do it under access you granted and can revoke.

The website is built as a standalone codebase for your business — one repository, one deployment — not a page inside a shared platform. That isolation is deliberate: a mistake on another client's site cannot touch yours, and yours can be handed over whole.

Access is granted per system — the site, the profile, the analytics property — and scoped to what the work needs. We do not ask for a master password to everything.

Internally, our own systems follow the same rule: credentials are never written into code, a model never chooses which client environment it writes to, and access to a client's live site resolves from your identity, not from a guess.

Updating hours, answering a routine review, publishing an approved offer: inside the permissions you set, an Agent may act. Anything that moves money, changes a domain, deletes content or changes the terms of a relationship is a stop-and-ask, every time.

Automated changes fail closed. If the target is ambiguous or the authority is unclear, nothing happens and you hear about it — that is a feature we test on purpose.

Our execution contract says a commit is not completion and an HTTP 200 is not completion: the requested change has to be observed on the live page before the system calls it done, and the report you get names what was changed and where.

That read-back is live for our own operations and is the acceptance gate for customer-facing execution, which is still being finished. Where the product does not yet produce the evidence, we say so rather than showing you a green checkmark.

Because each site is its own codebase and deployment, it can be transferred to you or to whoever you choose. Your domain and your accounts were always yours.

Data we hold about your business — the record, notes, requests — is yours to export on request. We do not publish a formal portability guarantee beyond what the product currently supports, and we will not imply one.

AI drafts, structures, executes routine steps, observes and reports. It does not set its own permissions, choose its own targets, spend money, or declare something done without verification. A named person is responsible for every Agent.

We build with third-party models and services — OpenAI, Anthropic, Google, Vercel, Supabase, GitHub — under their terms. Using a vendor is not a partnership or an endorsement, and we say which vendor does what when it matters to you.