Your shop’s records,
and nobody else’s
You are trusting somebody else’s software with every bill you raise. Here is exactly what happens to it — in plain words, with nothing left vague.
Claims you can check
Separated by design
Every record carries the id of the business that owns it, and the system refuses to write one without it. Staff at another shop cannot see your data even with a valid login.
Your address, your staff only
On your own web address, only your staff can sign in. A correct password for a different shop is refused there, because the account does not live at that address.
Roles, not honour
What a cashier can reach is decided by their role and checked on the server. Hiding a menu item is not a control, so we do not rely on it.
The server decides
Prices, discounts, taxes and stock levels are settled on the server for every line. A tampered browser can ask for anything; it still gets the right answer.
Written down
Cancelled bills, price changes, stock adjustments, sign-ins and failures are recorded with who did it and when. Not to catch anyone — to answer questions later.
Accounts under control
Repeated failures lock an account, first sign-in forces a password change, and idle sessions expire on their own.
It is yours, and it leaves with you
The test of who owns data is whether you can take it away on a normal Tuesday, with nobody asking why. You can.
- Catalogue, customers, suppliers, stock ledger and the full sales history
- Plain CSV files, which every spreadsheet opens
- Available whenever you want them — not only when you are leaving
- If a subscription lapses, the system turns read-only. Nothing is deleted.
Who can see your shop
The questions a careful owner asks before signing anything.
Can your support staff see my data?
Only when entering your account deliberately to help with something, and that is recorded as its own event with the name of the person who did it. It is not a background permission that is simply always on.
Where does my data live?
On the server this installation runs on, in one database, with every row tagged to the business that owns it. Your own address points at the same system — it does not create a second copy of anything.
What happens to my data if I leave?
Export everything first — you can do that yourself, at any time. After that, tell us and the account is closed. Nothing is deleted silently while you still have an account, including while a subscription is lapsed.
Is the connection encrypted?
On any installation served over HTTPS, yes, and session cookies are marked secure automatically when it is. Ask us about the certificate on your own address — we set it up with you.
Questions we have not answered?
Ask them before you sign up, not after. We would rather have the conversation early.