How your data is handled

Who can see what

Everything you enter belongs to your workspace and, within it, to a specific client. There's no view — for any role, including ours — that shows data across workspaces. Within a workspace, a Staff member typically only sees the transactions they themselves entered; an Owner or Admin sees everything for the clients they manage.

Your receipts specifically

• A receipt file is never available at a public link — every view of it goes through a check of who you are and whether you're allowed to see it, every time.
• Deleting a receipt archives it rather than destroying it immediately, so an accidental removal isn't unrecoverable.

Passwords

Your password is hashed and never stored or logged in plain text, including in audit records. New accounts start with a one-time temporary password that must be changed on first sign-in.

Full technical detail

This guide is the plain-English version. For the full architecture — including current deployment status — see the Security page.