LaundryBook policy

Security at LaundryBook

A plain-language overview of the safeguards used to protect shop and customer information.

Last updated: 23 September 2026

1. Shop-by-shop data isolation

Each physical shop has a separate workspace. Database row-level security and server-side authorization checks are used to prevent one shop from reading or changing another shop's customers, orders, payments, or settings.

2. Account protection

  • Passwords are handled by Supabase Auth and are not stored by LaundryBook in readable plain text.
  • A LaundryBook login is limited to one active browser session at a time, so a newer successful login displaces the older session.
  • Restricted shop-counter accounts cannot open owner-only or platform-administration features.
  • Platform administration requires stronger authentication, and support access is designed to be explicit, time-limited, and auditable.

3. Encryption and secure hosting

LaundryBook uses HTTPS for data in transit. Its hosted infrastructure providers state that customer data is encrypted in transit and at rest. Secrets and privileged provider keys remain on the server and are not exposed to the browser.

4. Payments and messaging

  • Razorpay processes online payments. LaundryBook does not store full card numbers, CVV, UPI PINs, netbanking passwords, or wallet credentials.
  • WhatsApp order updates require shop enablement and customer consent, and customers can reply STOP to block future LaundryBook messages.
  • Provider webhooks are verified before they can change payment, subscription, or messaging state.

5. Data use and recovery

  • LaundryBook does not sell shop or customer personal information or use it for unrelated advertising.
  • Only the information needed to provide, secure, support, and legally operate the service is collected.
  • Recovery procedures and encrypted backups are maintained and restore procedures are tested.
  • Verified access, correction, export, and deletion requests can be sent to LaundryBook support.

See our Privacy Policy and data deletion instructions.

6. Shared responsibility

No internet service can guarantee absolute security. Shop owners should use a unique strong password, protect their email and devices, avoid sharing owner credentials, and give each outlet only its assigned shop-counter login.

7. Report a security concern

Send suspected security or privacy issues to support@laundrybook.in. Do not include passwords, OTPs, access tokens, payment credentials, or customer records in the first message.