Security

How to report a problem

Use the contact form on our Help page to describe what you found and the page or account it affects. Please do not post the details in public.

We aim to reply within 2 business days, and to fix a confirmed problem within 7.

How your data is protected

• The site is served over HTTPS. Traffic between your browser and Tillvera is encrypted.
• Stored data is encrypted at rest by our database provider.
• Each shop can only see its own account. A signed-in user cannot open another retailer's figures.
• Card numbers are handled by Stripe. Tillvera stores a payment reference, the card brand and the last four digits.
• Passwords are stored as a hash. We cannot read them back.
• Staff access to customer data is limited to what is needed to run the service and to answer a support request.

What we ask of you

Use a password you do not use anywhere else. Do not share a manager login. If you think someone else has signed in as you, change your password from Settings and email us.

If something goes wrong

If a breach is likely to put your rights at risk, we will tell you and, where the law requires it, the Information Commissioner's Office. The detail is in our privacy policy.