Security & data handling
Your work stays your work.
Plain English, no marketing dust. Here is exactly how Mour stores your photos, handles your customers' data, and keeps card numbers off our servers.
At a glance
The four things that matter most
Stripe tokenizes the card in your browser. Numbers never reach our servers.
Every uploaded photo is processed to remove location and camera metadata — not just iPhone HEIC.
Photos are reachable only through private, time-limited links — never from a public address.
Account deletion is a grace window with self-service restore before anything is purged.
Photos & customer data
Your photos and client details stay private to your business
Job photos and client details are scoped to your business and handled so that even a stray URL or stolen file leaks nothing useful.
Photos stay yours
Every photo is reached through a private link that expires quickly, so even a shared link stops working almost immediately and your images stay yours.
EXIF & GPS stripped
Every photo is processed on upload — iPhone HEIC files are converted to JPEG, and all EXIF and GPS metadata is stripped from every image, whatever the format. The stored photo carries no location trail.
Isolated per business
Your business's data is walled off from every other account. Nobody else's clients, jobs, or photos are ever visible from your account, and yours are never visible from theirs.
Private to you
Photos and customer records belong to your business. They are not shared, sold, or surfaced to anyone outside your account.
Location only when you ask
Mour reads location only when you actively optimize a route or start navigation. There is no background location service running on your phone.
Analytics you control
No session replay and no fingerprinting. We use Google Analytics, plus advertising measurement where enabled — both run on your consent, and you can withdraw it at any time from Cookie settings.
Payments & accounts
Cards we never see, passwords we never store in the clear
Billing is handled entirely by the platform's processor. Mour only ever sees the transaction state, never the payment details.
Stripe tokenizes the card
No credit-card numbers ever reach a Mour server. On the web, Stripe tokenizes the card in your browser before anything is sent — we only ever see a token and your subscription state.
Mobile billing stays native
On iOS and Android, billing runs through the App Store or Google Play. We only receive the provider's transaction and subscription state, never the card.
Passwords are hashed
Passwords are stored as one-way hashes, never in plain text. You can also sign in with Google and skip a Mour password entirely.
Consent-based SMS
Customer text notifications require consent. Opt-out keywords and quiet-hours are handled automatically, so a reply of STOP is always honored.
Reset revokes everywhere
Resetting your password signs out every device on your account, so a stolen phone is locked out the moment you reset from another device.
Export on request
Want a copy of your data? Data export is available on request, covering the clients, jobs, and records tied to your account.
In transit & at rest
Encrypted on the wire and on disk
The boring fundamentals, done properly.
Encrypted in transit
Every connection to Mour runs over HTTPS with TLS 1.2 or higher, so data moving between your phone and our servers is encrypted on the wire.
Encrypted at rest
Your data lives on an encrypted disk. Database backups are encrypted too, and retained for 90 days before they rotate out.
Least-privilege access
Access to production systems is limited and audited. Routine operations never require reaching into your business's data.
Deletion & retention
Leave clean, on your terms
Deleting your account is reversible for a while, and then it is genuinely gone. No quiet copies left lying around.
30-day grace window
When you ask to delete your account, it enters a 30-day grace period instead of vanishing instantly. Nothing is purged during that window.
Self-service restore
Changed your mind? Just sign back in during the grace window and your account is restored, exactly as you left it. No support ticket required.
Permanent purge
After the grace window closes, your account and its data are permanently purged. There is no recovery once the purge runs.
Reporting
Found something? Tell us directly.
Mour is run by one person right now, so a security report goes straight to the founder with no queue in front of it. We do not run a paid bug bounty, but we will credit you in the changelog.
For the full policy on what we collect and how we share it, read the privacy policy. Terms of service live here.