The site you give it, the Supabase Postgres database behind it, public storage buckets, the JavaScript the site ships, and Stripe webhook delivery if you add a restricted key (it starts with rk_ and cannot charge cards). It does not post, comment, or message anyone.
Once a day Leadvesta takes a Postgres backup (pg_dump) and stores that one restore file (a custom-format dump) in private object storage, off the Supabase project. Starter keeps 30 days. Pro and the trial keep 90 days. You download the file and restore it yourself with pg_restore. Leadvesta does not write it back into your database.
7-day free trial, starts when you sign up, no card needed. The trial includes three apps and 90-day backup retention. When it ends, backups, uptime checks, and the weekly report stop until you subscribe.
Starter is US$29 a month for one app and 30 days of backups. Pro is US$59 a month for three apps and 90 days of backups. On both plans the site is checked once a day. Both include security drift checks, Stripe webhook health, and a weekly email.
Uptime mail goes out when a site goes down and when it recovers, not on every check. Security and Stripe mail go out when the finding changes after the first snapshot. Backup failures email immediately. A plain-English report goes out once a week.
Your account, the app URL, and the Supabase and Stripe credentials encrypted at rest. Database dumps live in object storage until the retention window ends. Secrets are not written to logs.