Effective.ai security posture for a small founder-led LLC, including data minimization, frontend secret boundaries, and service-provider controls.