diff --git a/.gitignore b/.gitignore
index 9f338bd..e0f8c72 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,10 +1,12 @@
-/_bmad
-/_bmad*
-/.agents
-/.github
-
-# Access lock file (created while the .accdb is open)
-*.laccdb
-
-# Personal Claude Code permission grants for this machine/session - not team config
+/_bmad
+/_bmad*
+/.agents
+/.github
+
+# Access database and its lock file - contains live order data, never committed.
+# Schema changes go through db/migrations/ instead; deploy never touches this file.
+db/webdata.accdb
+*.laccdb
+
+# Personal Claude Code permission grants for this machine/session - not team config
 .claude/settings.local.json
\ No newline at end of file