Security

Your business and your clients, kept safe.

How we protect sign-ins, payments and the details your clients trust you with.

🔒 https://yoursalon.example

Encrypted in transit.

Every page and the API use HTTPS, with HSTS switched on.

•••• 4242

Card numbers never reach us.

Cards are typed into Stripe, Square or Razorpay. We keep only the last four digits.

✓ Email verifiedGoogle

Proper sign-in.

Owners and staff sign in with Firebase. An email must be verified before anyone manages a business.

OwnerManagerTeam member

The right access.

Each person’s role is checked on our servers for every request.

Link works onceExpires in 15 min

Safe client links.

Clients sign in with one-time links. We store only a scrambled copy of each link.

03:17 every night✓ Off the server

Backed up nightly.

The database is copied every night to separate private storage.

a8f3••••••••c21e

Sensitive data encrypted.

Payment connections, attachments and imported files are encrypted in our database.

Deleted client✓ Details removed

Erased means erased.

Erase a client and their personal details are removed everywhere.

No ad cookiesNo tracking

No tracking. No selling.

No advertising or analytics cookies, and we never sell data.