How your data is protected

A plain summary of how accounts are kept separate and what we never store.

Your company's data is separate from every other company's. Each record is tied to your account, and every page and API call checks it.
Each person sees only what their role allows.
Every sign-in has a second step: an authenticator app code, or a one-time code by email.
Card details never reach us. Payments are handled by Stripe on Stripe's pages.
Calendar connections store their access tokens encrypted, and read only when you are busy, never what your events are.
API keys are stored only as a fingerprint, are limited to what you allow, and can be revoked at once.
An audit log under Account records sign-ins, team changes and settings changes.

The full detail is in the Privacy Policy.

Did this not answer it? Write to support@spotbookr.com.