Skip to content

Security and your money

Who holds what.

Your customers trust you with their address, their door code and their card. This page says plainly what Alevro does with each, and what we don't have in place yet.

Your money

  • It never sits with us.

    A card payment goes from your customer to your own Stripe account, and Stripe pays your bank. Alevro never holds it.

  • Card numbers never reach us.

    Your customer types their card into Stripe's own form. A saved card is kept by Stripe; we only ever hold a reference to it.

  • Our fee is in plain sight.

    Alevro's 1% on a card payment shows in your Stripe dashboard beside Stripe's own fee, payment by payment.

Your customers' details

  • Each business is kept apart in the database itself.

    The rule that one business can't read another's records is enforced by the database, as a second lock behind the app's own checks.

  • Your team sees what their job needs.

    Owner, manager, coordinator, front desk and practitioner are different levels of access. Pay rates and reports aren't open to everyone.

  • Health notes are kept apart.

    A therapist's note about a client is marked as clinical and isn't shown to the front desk.

Signing in

  • Two steps for owners and managers.

    The people who can see the money sign in with a password and a code from their phone.

  • No passwords for your customers.

    A customer signs in with a code sent to the email they booked with, so there's no customer password to be guessed or leaked.

Your site, and this one

  • No tracking cookies, no trackers.

    Your site counts visits without storing anything on a visitor's device or keeping anything that identifies them. This site counts its own visits the same way. That's why neither shows a cookie banner.

  • Photos lose their location.

    A photo uploaded to your site has its hidden details removed, including where it was taken, before anyone can see it.

  • What you send us here.

    The set-up form on this site emails your details to us so we can reply to you. That is all it is used for.

What we don't have yet.

Alevro is new. These are things a larger company would point to, and we can't.

  • An independent security test by an outside firm
  • A certification such as SOC 2 or ISO 27001
  • A choice of which country your data is kept in
  • A published list of the other services we rely on

Found a problem, or need to know something this page doesn't say? Write to sales@alevro.co.

Dainton sets up every new business personally, and replies within one working day. 14 days free, no card, no contract.

Try itGet set up free