# Launch checklist

## Analytics

- [ ] Instrument signup, onboarding-complete, search, booking-created, payment-success and rating-submitted events
- [ ] Verify funnel drop-off is visible from signup through first paid booking

## Transactional email

- [ ] Verify sending domain (SPF/DKIM) with the email provider so emails don't land in spam
- [ ] Confirm templates exist and render correctly for verification, password reset, booking reminder and receipt emails
- [ ] Send a test email through each triggering flow in production

## Domain & DNS

- [ ] Point production domain to hosting provider with SSL/TLS enabled
- [ ] Configure MX/SPF/DKIM records for the transactional email sending domain
- [ ] Confirm www and root domain both resolve correctly

## Error monitoring

- [ ] Wire Sentry into both frontend and backend with environment tags (production vs staging)
- [ ] Set alert thresholds for error spikes and route them to founder's phone/email
- [ ] Confirm a deliberately thrown test error appears in Sentry

## Backups

- [ ] Enable automated daily database backups in Supabase
- [ ] Perform one test restore from a backup to confirm the process works

## Privacy

- [ ] Publish privacy policy and terms of service covering payment data, location data and messaging
- [ ] Add a data deletion/account closure process for GDPR/CCPA-style requests
- [ ] Confirm card data never touches app servers, only Stripe-hosted elements

## Payment webhooks

- [ ] Register and verify Stripe webhook endpoint with signature checking enabled
- [ ] Register Stripe Connect webhooks for payout and account status events
- [ ] Test webhook handling for successful payment, failed payment, refund and dispute events in Stripe test mode

## Production config

- [ ] Set all environment variables in the production host, none committed to the repo
- [ ] Separate staging and production Stripe/Supabase projects to avoid cross-contamination
- [ ] Confirm service-role Supabase keys are only used server-side, never exposed to the client bundle

## Push notifications

- [ ] Configure production push credentials (APNs cert / FCM server key)
- [ ] Send a test push notification end-to-end for a booking event