Your data

Every record carries the business it belongs to. The database itself checks this on every read and every write, with row-level rules per business, so a request made for one business cannot return another business's records.

The check sits in the database, not only in the app.

The owner and admins see the business's records and its money.

Other staff see only the parts their role opens, without the money. A partner sees their own statement.

Employees and residents who sign in see only their own file.

Your records are kept in a managed cloud database, and the app runs on a cloud host. They may be stored in a country other than yours.

The providers we use are listed by kind in the Privacy Policy.

Every night an encrypted copy of the whole database is made and kept away from the live system.

Restoring it has been tested: the restored copy matched the live database.

Owners and admins can turn on two-step sign-in: after the password, a code from an authenticator app.

Passwords are stored only as salted hashes. We cannot see them.

You can ask for a copy of the records in your business, and you can ask us to delete your account and its data. Write to us from the email address on your account. We may keep limited records where the law requires it.

This is what our Privacy Policy promises.

If you think something is wrong with how your records are kept or who can see them, tell us.

Reach us from the Contact page.