SECURITY & DATA
Your customer list is your business. Keep it safe.
Accounts, permissions and storage are all handled on the server, not by hiding a few buttons on the page.
Accounts & sign-in
- Each member signs in with their own name and password
- Passwords are salted and stored with PBKDF2, never in plain text
- Five wrong attempts lock the account for 10 minutes
- Changing a password signs out every other device
Server-side permissions
- Sales only ever receive their own customers’ data
- Every change is re-checked on the server against who made it
- Members are deactivated, never deleted, so history keeps their names
- At least one admin always remains
Storage & recovery
- Runs on Cloudflare, with data in a Cloudflare D1 database
- Every change saves itself; simultaneous edits never overwrite each other
- The database can be restored to any point in the last 30 days
- Admins can export everything as a JSON backup at any time
Who can see what
Two roles with clear boundaries. Sales figures count only a salesperson’s own customers.
| Action | Admin | Sales |
|---|---|---|
| View customers | All customers | Own customers only |
| Log follow-ups, change stage, record payments and revisits | All customers | Own customers only |
| Reassign customers, undo a won deal | Yes | No |
| Reminder settings, team and sources | Yes | Read only |
| Import data, load demo data, clear all | Yes | No |
| Export a backup | Everything | Own customers only |
Trust it with your customers
Once your admin is set up, export a backup to see exactly what your data looks like.