How we keep your data safe.

Last updated November 3, 2026. Draft, pending legal review.

No passwords, ever

We never ask for your password. You hand us access you control: an invite into your Podio workspace, or a read-only GoHighLevel key that you can switch off at any moment.

The sealed drop box

• Your key or file is locked in your own browser before it is sent, with a fresh key for each item that only our mover machine can unlock.
• Each drop box link is signed, works for one job only, and expires after 7 days. Each slot accepts one upload and never reopens.
• Drop box pages are never indexed by search engines and never pass their link on to other sites.

Deletion you can check

At handover we delete your key, our copies and our access, and your report lists each with the time. Anything left from a move that stops is deleted automatically after 30 days.

This website

Every page is served over HTTPS with strict security headers, including a content security policy that allows no third-party scripts. The booking form is checked on our server, limited to a few submissions per minute, screened for automated spam and passed to our business system over an authenticated connection. Every change is type-checked, tested and fully built before it can ship.

Reporting a vulnerability

If you believe you have found a security issue, email security@barakatlabs.com with “Security” in the subject and steps to reproduce it. We will reply within a few business days. Please test only against your own data, do not access or change anyone else's, and give us reasonable time to fix the issue before sharing it publicly. We will not take action against good-faith research that follows these rules.

Machine-readable contact: /.well-known/security.txt