How secure is my data, and who can see it?

Each company has its own private set of data that no other company can see, and tests check that every part of the product keeps it that way. Access inside your company is controlled by role, so people only see what their role allows. Passwords are stored in a scrambled form, the payment keys you enter are stored encrypted, and the activity history records who changed what. Card and bank details are entered on Stripe's, PayPal's or GoCardless's own pages and never reach us. Our privacy policy explains how personal data is handled under UK GDPR, and we can provide data processing terms on request.