Security and data protection

Every record carries the business it belongs to, and the database itself refuses to mix data from two businesses. People in one business cannot see or touch another's, not even by mistake.

The servers and the database are at Hetzner, in Germany. The data does not leave the European Union.

The website, the app and the booking page always use HTTPS. Nothing travels in the clear between your browser or phone and DameHora.

Each business's Bilteo credentials and the phones' tokens are stored encrypted in the database. People's passwords are stored as a hash, never in the clear.

The database and the photos are copied every day to separate storage, and the last fifteen days are kept.

Every important change is recorded with who made it and when: appointments, payments, customers, settings. That log only grows: not even DameHora can delete or alter an entry.

Each person sees and does only what their role allows: owner, manager, reception or professional. On the counter iPad every action asks for the PIN of whoever does it. When DameHora's support needs to see what a person sees in order to help them, it only looks, with a reason, for two hours at most and on record: it cannot change anything.

The subscription is paid at Stripe, on its own page. DameHora never sees or stores card numbers.

Before the first booking the email is verified with a code, the form carries reCAPTCHA and attempts are limited. So nobody fills your diary with fake appointments.