Security at LaundryBook

Each physical shop has a separate workspace. Database row-level security and server-side authorization checks are used to prevent one shop from reading or changing another shop's customers, orders, payments, or settings.

• Passwords are handled by Supabase Auth and are not stored by LaundryBook in readable plain text.
• A LaundryBook login is limited to one active browser session at a time, so a newer successful login displaces the older session.
• Restricted shop-counter accounts cannot open owner-only or platform-administration features.
• Platform administration requires stronger authentication, and support access is designed to be explicit, time-limited, and auditable.

LaundryBook uses HTTPS for data in transit. Its hosted infrastructure providers state that customer data is encrypted in transit and at rest. Secrets and privileged provider keys remain on the server and are not exposed to the browser.

• Razorpay processes online payments. LaundryBook does not store full card numbers, CVV, UPI PINs, netbanking passwords, or wallet credentials.
• WhatsApp order updates open a prepared message in the shop’s own WhatsApp account. The shopkeeper reviews and sends it; LaundryBook does not send it automatically.
• Shops must check the recipient’s number, have any required customer permission, and respect requests to stop messaging. An Owner can turn the feature off in Settings.
• Sent and Not sent marks are recorded by the shop. They do not confirm WhatsApp delivery or that a customer has read the message.
• Provider webhooks are verified before they can change payment or subscription state.

• LaundryBook does not sell shop or customer personal information or use it for unrelated advertising.
• Only the information needed to provide, secure, support, and legally operate the service is collected.
• Recovery procedures and encrypted backups are maintained and restore procedures are tested.
• Verified access, correction, export, and deletion requests can be sent to LaundryBook support.

See our Privacy Policy and data deletion instructions.

No internet service can guarantee absolute security. Shop owners should use a unique strong password, protect their email and devices, avoid sharing owner credentials, and give each outlet only its assigned shop-counter login.

Send suspected security or privacy issues to support@laundrybook.in. Do not include passwords, OTPs, access tokens, payment credentials, or customer records in the first message.