Your customers' books deserve care.
You're trusting us with your customers' accounting data. Here is how we handle it. Nothing is live yet, and no outside party has reviewed any of this.
Only the access we need
We ask the accounting system for the narrowest permissions the integration can work with, and nothing more. Your customers can revoke access at any time from their accounting system.
Data stays in the EU
Our server is in Germany and its backups are stored in the EU. Traffic reaches it through Cloudflare, and email goes through Resend's EU region.
Encrypted
Traffic is encrypted in transit. Access tokens to your customers' systems are encrypted in our database.
Kept only as long as needed
We keep what the integration needs to book correctly and to answer questions about a booking. When a customer disconnects, their data is deleted on a set schedule.
A full audit trail
Every voucher can be traced back to the sales, fees and payouts it came from, and every change to booking rules is recorded.
No selling or sharing
We never sell data or use one customer's data for another. We don't run ads.
Two-step sign-in
Owners and admins of a vendor account sign in with a code from an authenticator app, with backup codes if the phone is lost.
Each customer walled off
Every request is checked against the vendor and merchant it belongs to, and tests check that one cannot read another's data.
Export and erase on request
A merchant's data can be exported or erased from the dashboard. Erasing removes our copy and revokes our access, never their books.
Documents you'll get before go-live.
None is ready yet. The data processing agreement is a draft that no lawyer has reviewed, and the other two are not written. All three will be ready before anyone goes live.
- Data processing agreementUnder GDPR, to be signed with every software vendor before go-live.
- List of subprocessorsEvery company that will process data on our behalf, and where.
- Incident processHow and how fast we will tell you if something goes wrong.
Reporting a security issue
Nothing is live yet, so there is no production system to test and no security inbox. A reporting address will be listed here before launch. Please never access other people's data while testing.
Security questions?
Nothing is live yet, so there is nobody to send a questionnaire to. This page lists what is built and what is not.