Your clients' data, treated like it's money.

Guests pay through Stripe Checkout on your agency's own connected Stripe account. Card data goes straight to Stripe, a PCI-DSS Level 1 provider. We never see, store, or transmit a card number, and we never hold your funds.

Row-level security is enforced on every table in the database. Your blocks, guests, payments, and documents are scoped to your agency at the database layer, not just in the application code. No other agency can read your rows, and that isolation cannot be switched off from the app.

All traffic runs over TLS. Data is encrypted at rest by our infrastructure providers. There are no unencrypted paths between your browser, the platform, and the database.

Guest booking, RSVP, and inquiry pages are rate-limited per IP and protected with honeypots. Private links (couple dashboards, quotes, signature pages) use high-entropy tokens; treat them like passwords and share them only with the people they're for.

Outbound webhooks are HMAC-signed so your systems can verify every delivery came from us. Inbound Stripe events are signature-verified before anything changes. E-signatures record a document hash, timestamp, IP, and consent for the audit trail.

Export your rooming lists, payments, and reports as CSV anytime. A full account export is available on request, and when you leave, your data is deleted per the retention terms in the DPA.