Your data and security

You, the client an invoice is addressed to, and anyone you give a payment link to — for that one invoice only.

Every list and detail view refuses by default: a request that does not prove which account it belongs to gets nothing, rather than falling through to an unfiltered result.

Card details never touch our systems. Payment is handled by the gateway on their own page.

Each payment is bound to the specific invoice it was raised for, so a payment for one invoice cannot be applied to another, and a payment cannot be applied twice.

Links in the emails we send always point at our own configured domain. A request cannot persuade us to send you a genuine-looking email pointing somewhere else.