We're not here to harvest data

We're here to help people make more money, make everyone's job easier and smoother, and keep the company growing.

A note from the founder. Praxion Exterior Edition was built by a rep who worked in the field — someone who knows the ins and outs of home-improvement field sales, and the struggles that everyday reps, management and install departments deal with. He wanted nothing more than smooth, clean business. Happy customers, happy reps, happy the client.

The app holds real customers' details and your pay, so it is built to keep both tight. Each rep's data stays with that rep, and customer messages wait for your approval unless you switch on a specific automatic one. This is exactly what it does today, in plain English.

How your data is protected

Your app password is never stored. Only a bcrypt hash of it is kept — a one-way scramble with its own random salt that nobody, the administrator included, can turn back into the password. Your sign-in lasts an hour and renews with a refresh token that lasts up to 30 days.
Connected accounts are encrypted at rest. Saved passwords, keys and tokens for the accounts you connect are encrypted with Fernet (AES-128-CBC plus an HMAC-SHA256 seal) under a key held on the server, and decrypted only at the moment they are used. Settings only ever shows whether an account is connected, never the secret.
Your company sign-in password is never stored. If the company sign-in ever asks for it, it is held in memory for that one sign-in — five minutes at most — used once, and wiped.
Your book stays yours. Every request carries your signed sign-in token, and your records are filtered by the rep it names, so another rep who signs in sees their own book, not yours. Shared team views, like the office job board, show office-wide job status to signed-in reps.
Links that can't be lifted from a copy. Customer quote links and share links are stored only as SHA-256 hashes, so a copy of the database would not hand anyone a working link.
Encrypted in transit. All traffic is HTTPS through an encrypted tunnel, and the server refuses traffic that didn't come through it.
Nothing cached, nothing lost. App pages are sent no-store, so a browser or a proxy doesn't keep a copy, and the database is backed up every night on the server.
Customer messages wait for your tap. Every text and email is a draft until you approve it, except the automatic ones an office or rep switches on (install-day reminders, the cover sheet and the post-install thank-you), each with its own switch.

Every detail, including what is and isn't encrypted: how your data is protected in the privacy policy — no account needed. Questions go to [email protected].

What it does, step by step

We're not here to harvest data. We're here to help people make more money and make everybody's job easier, smoother, and keep the company growing like it always has.
Your app password is kept only as a bcrypt hash with its own random salt. Sign-in tokens last an hour; refresh tokens last up to 30 days.
Saved passwords, keys and tokens for connected accounts are encrypted at rest with Fernet (AES-128-CBC plus HMAC-SHA256) under a server-held key, and decrypted only at the moment of use. Settings only shows whether an account is connected.
Your company sign-in password is never stored. If it is asked for, it is held in memory for at most five minutes, used once and wiped.
Your records are filtered by the rep id inside your signed sign-in token. Shared team views, like the office job board, show office-wide job status to signed-in reps.
Quote links and share links are stored only as SHA-256 hashes. All traffic is HTTPS through the tunnel, and the server refuses anything that didn't come through it.
App pages are sent no-store, and the database is backed up every night on the server.
Every text and email to a customer is a draft until you approve it, except the automatic ones an office or rep switches on (install-day reminders, the cover sheet and the post-install thank-you), each with its own switch.

Time it saves Estimates

Task	By hand, typically	With the app, typically
Remembering another password	Another password to manage	The company sign-in you already use

Small on time, large on peace of mind.

Typical estimates, not guarantees.

Errors it prevents Guesstimates

Another rep reading your bookRecords are filtered by the rep named in your signed sign-in token.Guesstimate: zero mixed-up books
A stored password or key read by someone elseYour app password is a bcrypt hash; connected-account secrets are encrypted at rest and never shown back.Guesstimate: no readable secrets at rest
A message sent without the rep's approvalEnforced in the app itself.Guesstimate: zero unapproved sends

Time figures are typical estimates for an active rep, not guarantees. Error figures are guesstimates for a rep closing about 10 jobs a month. Both vary with the rep, the office and the job.

Who it helps

The repYour book and your pay stay yours.
Office & installersCustomer details kept tight.
The customerTheir details aren't sold, and nothing goes to them without the rep.
The managerClear rules about who sees what.