Security & privacy

Your data, walled off.Here’s exactly how.

LimeDrop holds what your business runs on: your customers, your orders and your team’s conversations. This page covers how we protect it, who helps us run it, and what we don’t offer yet. No borrowed badges. Just what the product actually does.

Last updated October 2026

Your company’s data is walled off

Every record in LimeDrop belongs to one company. The database itself checks that on every request, not just the app.

  • Row-level security. Each request is matched to the signed-in person’s company before anything is read or changed.

  • Access ends with membership. Once a teammate’s access is switched off, the database stops returning your company’s data to them.

  • Tested automatically. Any change to the database or server code runs our automated database and security tests.

You decide who sees the money

Three roles: Admin, Manager and Rep. Admins choose what managers and reps can do, and the settings below are enforced by our servers, not just hidden on screen.

  • Revenue. Who sees order totals, payments and revenue. Hidden figures are masked before they leave the database.

  • Editing customers. Turn it off for anyone who should look but not touch.

  • Bulk texts and emails. Off for reps until an admin turns it on.

  • Reversing commission. Admins always can. You choose who else may.

  • Admins only. Connecting Shopify, QuickBooks, Xero, Zoho, ShipStation or EasyPost, setting up your LimeLine phone account, inviting teammates and changing roles.

  • Worth knowing. Two settings are saved but not applied yet: limiting reps to their own customers, and who can send one-to-one emails and texts. Today every rep can open every customer.

  • Signing in. Email and password, or a one-time sign-in link sent to your inbox.

Hosting and encryption

LimeDrop runs on Supabase (database, sign-in and file storage) and Vercel (the app itself).

  • HTTPS everywhere. Between your browser and LimeDrop, and between LimeDrop and every service it connects to.

  • Private attachments. Files you attach to customers are private to your company. Images sent by text (MMS), profile photos and company logos are served from public links.

LimeBot drafts. You send.

LimeBot writes drafts, customer summaries and talking points for the person using LimeDrop. It never sends anything on its own.

  • Only while someone’s working. A draft or talking points when someone asks, or a customer summary when they open a customer with the summary view on. No automation or scheduled job calls LimeBot.

  • Your company’s data only. It reads with the permissions of the person using it, so it can’t see another company’s records.

  • What goes to Anthropic’s Claude. The context each request needs, trimmed: the customer’s name and reorder status, the first names of the person you’re writing to and of the rep, order and delivery dates, revenue, your notes, recent calls, emails, texts and meetings, open tasks, upsell suggestions, and short excerpts from up to three recent call transcripts.

  • Usage, not words. Our AI usage log keeps the feature, token counts and cost, not the prompt or the reply.

  • Internal stays internal. LimeBot is told never to quote your internal notes or call transcripts to a customer, and nothing it writes goes out until a person sends it.

  • Call transcripts. Recorded calls are transcribed automatically by OpenAI’s Whisper, so the call audio is sent to OpenAI.

Integrations and connection keys

The keys LimeDrop uses to reach your QuickBooks, Xero, Zoho, Shopify, ShipStation, EasyPost and phone accounts are encrypted before we store them.

  • AES-256-GCM, on our servers. Your browser can’t read the keys, and an automated database test checks that whenever the database changes.

  • We don’t store your mailbox password. Gmail and Outlook connect through Nylas. LimeDrop keeps a connection ID, and disconnecting revokes it.

  • Signed updates only. When QuickBooks, Xero or Nylas sends us an update, we check its signature first and reject it if it doesn’t match.

  • Platform secrets in a vault. The secrets LimeDrop’s own background jobs use are kept in Supabase Vault.

Texts, email and calls

Your team texts, emails and calls customers from inside LimeDrop, so the guardrails live there too.

  • STOP means stop. Reply STOP (or UNSUBSCRIBE, CANCEL, END or QUIT) and that number won’t be texted again by anyone at your company.

  • One-click unsubscribe. Every bulk email carries one, and people who unsubscribe are skipped before anything is sent.

  • Guardrails on bulk texts. Up to 500 people per send, and anything over 100 asks you to type SEND to confirm.

  • Call recording. Incoming LimeLine calls are recorded and transcribed, and the recordings are kept by our phone provider, Telnyx. LimeDrop doesn’t announce the recording, so telling callers and getting any consent the law requires is up to you.

  • Email tracking. LimeDrop can record when an email is opened or a link in it is clicked. Admins set the company default, which starts on.

Your data, your call

It’s your customer list. Export it whenever you like.

  • Export to CSV. Select customers, orders or commissions in their lists and export them. Each customer’s people, activity and payments export from their card.

  • Safe to open. Exported files are cleaned so a spreadsheet can’t run formulas hidden in them.

  • No ad trackers in the app. No third-party analytics or advertising scripts, and only the cookies the app needs to work.

How we build it

Every change to LimeDrop runs through the same automated checks.

  • Secret scanning. Every proposed change, and every update to the main code, is scanned for leaked keys.

  • Database and security tests. They run whenever the database or server code changes, including one that proves browsers can’t read your connection keys.

  • Lean logs. Our logs record that a request happened, not what was in it. Never message contents, credentials or customer documents.

  • Clickjacking protection. The app refuses to load inside another website’s frame.

  • Locked-down background jobs. They accept only LimeDrop’s own service key, never a browser session.

Who helps us run LimeDrop

These companies process data on our behalf to run the service, each for the job listed.

ServiceWhat we use it forData it handles
SupabaseFor: Database, sign-in, file storage, background jobs and secret storageData: Everything stored in LimeDrop
VercelFor: Hosts the app and its server functionsData: App traffic and server logs
AnthropicFor: LimeBot drafts, summaries and talking pointsData: The customer context sent with each request
OpenAIFor: Transcribes recorded calls (Whisper)Data: Call recording audio
TelnyxFor: Calling, phone numbers, call recordings, texting and carrier registrationData: Phone numbers, call audio and recordings, texts, business registration details
TwilioFor: Texting (our default texting provider)Data: Phone numbers and texts
NylasFor: Connects Gmail and Outlook to send and receive email, and tracks opens and clicksData: Emails between your team and your customers, email addresses, open and click events
Amazon Web Services (SES)For: Bulk email, only if your company turns it onData: Recipient addresses and email content
ResendFor: Sign-in, confirmation and invite emailsData: Your team’s email addresses and sign-in links
Google Maps PlatformFor: Address lookup, business search during sign-up, and map imagesData: Addresses and business names you type, customer addresses for maps

Integrations you connect

  • Shopify
  • QuickBooks
  • Xero
  • Zoho
  • ShipStation
  • EasyPost

These connect to your own accounts. Data moves between LimeDrop and each one under your own agreement with that company.

  • Most of these companies are based in the United States, and some process data there.

What we don’t have yet

We’d rather you hear it from us. If any of these is a must-have for your team, tell us.

  • Two-factor sign-in.

  • Sign in with Google or Microsoft, or single sign-on (SSO).

  • An independent certification such as SOC 2 or ISO 27001.

  • An audit log of sign-ins and changes. Each customer’s timeline does show what happened and who did it.

  • Self-serve removal. Removing a teammate or deleting your workspace takes an email to us for now.

  • A one-click export of everything. Exports work list by list today.

  • A published uptime commitment or status page.

Found a security issue?

Please tell us privately first.

  • Email hello@limedrop.com with what you found and the steps to reproduce it.

  • Give us a fair chance to fix it before you share it publicly.

  • Stay within your own data. Don’t access, change or delete anything that isn’t yours, and stop once you’ve confirmed the problem.

Questions about security or privacy?

Email us and you’ll hear back from the people building LimeDrop.

hello@limedrop.comPrivacy Policy

Stop losing customers because
your CRM is a chore.

We’re opening LimeDrop to wholesalers and distributors in stages. Join the waitlist and you’ll be first to hear when it’s your turn.

Join the waitlist

Join the waitlist