PricingBook a demo
Book a demoStart free trial

Security and data, in plain language

What we do with your store’s data, where it lives, how it is backed up — and what we don’t claim.

Six layers that protect your store

  1. Encrypted in transit
    HTTPS everywhere — the app, the online store and this website.
  2. Daily backups
    Automatic daily backups so a bad day is recoverable.
  3. Roles & permissions
    Each staff login sees only what their role allows.
  4. Separated accounts
    Each business’s data is kept to its own account.
  5. Your data, exportable
    CSV exports of products, customers and sales whenever you want.
  6. No card data
    Card numbers never touch the POS; your processor handles them.

What we don’t claim

  • No PCI DSS, SOC 2, ISO 27001 or HIPAA certification is claimed.
  • No offline mode: the register needs an internet connection.
  • No guarantee of uptime numbers we have not measured yet.

What you can do in your store

Give each person their own login

Never share one cashier password.

Use the least access that works

Hide cost prices and exports from junior staff.

Lock screens

Log out shared tablets at closing.

Keep devices updated

Browser and OS updates fix security issues.

More: privacy policy · data requests · terms.

Security questions

Where is my pet store data stored?

In the hosted database for your business account on servers we manage. Your store’s data is separated from other businesses by account.

Is my data backed up?

Yes, daily, with backups kept for a rolling period so we can restore after a mistake or failure.

Is the connection encrypted?

Yes. The app and this website are served over HTTPS only.

Do you store card numbers?

No. Card payments run on your processor’s terminal; the POS records only the tender type and amount.

Who on my team can see what?

You decide with roles and permissions: for example cashiers can sell but not see costs, export customers or delete sales.

Can I export or delete my data?

Yes. Export products, customers and sales to CSV at any time. On cancellation the account is deleted after 30 days.

Are you PCI, SOC 2 or ISO certified?

We do not claim any certification. Because we do not handle card data, PCI scope sits with your payment processor.

What happens if I lose internet?

The register needs a connection. Your data stays safe on the server; use a mobile hotspot as backup.

How do I report a security issue?

Use the Show email button on the contact page for the privacy & data address, or the contact form.

Questions about your data? Ask us.

30-day free trial, no cardNo contract — cancel any timeReply within 1 business day