🔒 https://yoursalon.exampleEncrypted in transit.
Every page and the API use HTTPS, with HSTS switched on.
Security
How we protect sign-ins, payments and the details your clients trust you with.
🔒 https://yoursalon.exampleEvery page and the API use HTTPS, with HSTS switched on.
Cards are typed into Stripe, Square or Razorpay. We keep only the last four digits.
Owners and staff sign in with Firebase. An email must be verified before anyone manages a business.
Each person’s role is checked on our servers for every request.
Clients sign in with one-time links. We store only a scrambled copy of each link.
The database is copied every night to separate private storage.
a8f3••••••••c21ePayment connections, attachments and imported files are encrypted in our database.
Erase a client and their personal details are removed everywhere.
No advertising or analytics cookies, and we never sell data.
What we collect, why, and your rights under UK data protection law.
Read the policy →Tell us about a security issue and we’ll look into it.
admin@confirva.com →