Security

A shop’s sales, stock and accounts are its business. This page explains, in plain words, how SaleFlowPoint protects them. It goes with our Privacy Policy and Terms of Service.

Your connection

• Every page and every request uses HTTPS. A plain http address is sent to https.
• The app tells browsers to keep using HTTPS for this site and not to show it inside another site’s frame.

Signing in

• Passwords are hashed with Argon2id. We never store the password itself and cannot read or recover it - we can only reset it.
• A new password is checked against a list of common and breached passwords, and refused if it is on it.
• Repeated wrong sign-ins are slowed down, for the account and for the address they come from.
• You can see every device you are signed in on and sign any one of them out. An owner can sign a member of staff out everywhere.

Keeping companies apart

• Every record belongs to one company, and every request is checked against the company of the person asking. Another company’s record answers “not found”, as if it did not exist.
• Inside a company, each person has a role with its own permissions and sees only the branches they work at.
• Actions that matter - voids, refunds, price and permission changes - are written to a log that can be added to but not edited.

Payments and card numbers

SaleFlowPoint does not take, see or store card numbers. When a sale is paid by card, your own card machine takes the payment; the till only records that the sale was paid by card and for how much. Our own subscription is not charged to a stored card either.

Your data is yours

• The products, customers, sales and accounts you enter belong to your business, not to us.
• You can download your reports as Excel or CSV files, and your accounting journal as CSV, at any time.
• You can close your account and ask for your company’s data to be erased. How long anything is kept is set out in the Privacy Policy.
• We do not sell your data, and we do not use it for advertising.

Backups

A full backup of the database is taken before every update of the software, and an update does not go ahead without one. If an update fails its own health check, the previous version is put back.

If the internet drops

The till keeps selling for cash when the connection is lost and sends those sales when it returns. Each one carries its own number, so a sale is never recorded twice.

What we have not got yet

We are a small company and we would rather say this than have you assume: SaleFlowPoint has not yet been through an independent security audit or penetration test, and holds no security certification. If your business needs one, please ask us before you rely on it.

Reporting a problem

If you think you have found a security problem, please write to support@saleflowpoint.com with the word “Security” in the subject. Tell us what you saw and how to repeat it. We read every report, we will reply to you, and we will not take action against anyone who reports a problem in good faith and does not look at or change other people’s data.