Your operation's data,
handled like it's ours.

Encryption in transit

Every connection to BuyingGroupPro is served over HTTPS/TLS. In production we force SSL, mark session and CSRF cookies secure, and send a one-year HSTS policy (with subdomains and preload) so browsers refuse to talk to us over plain HTTP. We also send content-type-nosniff and a Content Security Policy to limit what can run on the page.

Field-level encryption at rest

Beyond storage-layer encryption, we individually encrypt the fields that would do the most damage if exposed — using Fernet (AES-128-CBC with HMAC-SHA256 authentication). The encryption key is managed separately from the database, so a stolen database backup is not enough to read them. We encrypt:

• Connected-inbox credentials — the app password you use to let us import order confirmations.
• Buying-group logins & API secrets — keys, tokens, and passwords for every group you connect.
• Gift card numbers & PINs — encrypted the same way, so your stored cards aren't sitting in plaintext.

What we never store

We do not store full credit or debit card numbers — at most the last few digits you choose to save (four, or five for Amex), for your own reconciliation. We don't connect to your bank, and we never sell or rent your data. When you connect an email inbox, we access it solely to import order confirmations from supported retailers, and you can disconnect it at any time.

Your payouts go only to you

BuyingGroupPro can request your buying-group payouts for you — but the money can only ever go to the bank account you already registered with that group yourself. We trigger the request; we don't choose or change where it lands, and we can't point it anywhere new. The destination stays on the group's side, under your control, exactly as if you'd clicked the button. Auto-payouts are strictly opt-in, one group at a time.

Account security

Passwords are hashed with Django's industry-standard PBKDF2 — we can't see them and neither can a database dump. Two-factor authentication (TOTP) is available on every plan, including Free, and works with any standard authenticator app. Sensitive endpoints are rate-limited to blunt brute-force and abuse.

Where it runs

BuyingGroupPro runs on managed cloud infrastructure with database encryption at rest at the storage layer. Because the automation lives in the cloud — not on your laptop — your tracking still submits, your insurance still files, and your payouts still get requested when your computer is closed. You can work from any device, and so can a VA you trust, without your credentials ever leaving our encrypted store.