Security & privacy
Your business data stays yours
Your sales, costs, prices and customers are some of the most sensitive things you own. Here is exactly who can see them, what we never do with them, and how they are protected.
Free trial · No card needed · Nothing to install · English and Spanish
01
Who can see your business
You and the people you invite
Nobody can open your business unless you invite them. There is no public link and no directory of businesses.
Roles that limit access
Owners and Admins manage the business; Managers and Staff see only the locations you assign them.
Invitations that can't be forwarded
An invitation only works for the email address it was sent to, can be revoked, and expires after 7 days.
A record of every change
Prices, roles, stock, permissions and settings changes are written to a history that can't be edited.
02
What we never do
No fine print: these are the rules Kipi Apay is built on.
Never sell your data
Not to advertisers, data brokers or anyone else.
Never use it for ads
Kipi Apay has no advertising and does not profile you or your customers.
Never train AI on it
Your numbers are not used to train AI models, ours or anyone else's.
Never scan it for other purposes
We store your data to show it back to you and your team, and that is all.
Nothing in our analytics
Website statistics only run if you accept cookies, and they never include your business data, names or emails. Ids in addresses are removed first.
Nothing in our error reports
When something breaks, the report carries the error and an id, never your request contents, cookies or email.
03
How it is protected
Every business isolated
Each business is walled off in the database itself, so one business's records can never point at another's.
Checked on every request
Every action checks that you belong to that business, have the right role and can see that location.
Strong password storage
Passwords are hashed with Argon2, never stored in plain text and never readable, even by us.
Protected sign-in
Repeated wrong guesses are slowed down, reset links work once and expire in an hour, and a password reset signs you out on every device.
Secure sessions
Your sign-in cookie can't be read by scripts and is only sent over encrypted connections.
Payments by Stripe
Card details go straight to Stripe. Your card number never touches our servers.
04
When our support team helps
Time-limited
If support needs to look inside your business to solve a problem, the access ends automatically after a short time.
With a written reason
Support can't open a business without recording why.
Visible to you
Every support visit appears in your business's change history.
05
Your data, your control
Export anytime
Download your reports as CSV whenever you want.
Ask for a copy or deletion
Write to us and we will send your personal data or delete your account, as described in the Privacy Policy.
Nothing quietly deleted
Sales, stock and money records are archived or voided, never silently removed, so your history stays trustworthy.
Questions, answered
Not as part of normal work. The only exception is a support visit to fix a problem, which is time-limited, needs a written reason and shows in your change history.
No. Subscriptions are paid through Stripe, and your card details never reach our servers.
No. Your business data is not used to train AI models, and Kipi Apay does not send it to AI services.
The business is locked, but your data is kept, and you can pick up where you left off when you renew. You can also ask us to delete it.
Private from your first sale
Create your business in minutes. Only you and the people you invite will ever see it.