Security
How we keep things safe
Graftr HQ holds your customers' details and your business records, so we take care of them. This page says, in plain words, what we do. No system is perfectly safe, so we also tell you what to do if something goes wrong.
Customers' details
- Hidden until booked. A customer's phone number, email and full address are kept from the tradesperson until the job is booked. Until then they only see a first name and the area.
- Private links, not accounts. A customer follows a private link. Each link is a long random code that is stored scrambled on our side and stops working after a while.
- Who is coming. On the day of a job, or once "on my way" is sent, the customer sees a badge with the person's photo, name, trade, van and registration, so they can check it is the right person before opening the door.
Payments
- We never see a card number. Card details are typed into Stripe's secure page. We keep only the card brand and the last four digits.
- Amounts are worked out on our servers. The phone cannot change what a customer owes. A card payment counts only once Stripe confirms it.
- Fees are small and clear. The app shows what is owed and when it is taken.
Your account
- Email confirmed. You confirm your email address before an account can be used.
- One business cannot see another's data. The database enforces this by rule, so a mistake in the app cannot show someone else's jobs.
- Delete your account any time. In the app, go to Profile, then Account and help, then Delete my account. Your page, photos and records are removed, as the notice on that screen explains.
Your team
- A private link and a code. Each team member gets their own private link and their own 4-digit code. They see only the jobs you give them.
- Locked after wrong tries. Five wrong codes lock the link for an hour, and you are told.
- You stay in charge. You can take a job back or remove a team member at once, and their link stops working. Cash and bank payments they log wait for you to confirm them.
Keeping the community safe
- Report and block. Reviews, public posts and customer enquiries can be reported, and a customer you block cannot send you another enquiry. Reports go to reports@graftrhq.com and we aim to reply within 24 hours.
- Public text is checked. Phone numbers, email addresses, website addresses and abusive words are not allowed in public posts, business pages or reviews.
Where your data lives
Our database is hosted in London. Our suppliers and what each one sees are listed in the privacy notice.
If something goes wrong
If you think your account has been used by someone else, change your password and email support@graftrhq.com straight away. If there is a breach that puts you at risk, we tell you and the regulator in the time the law requires.
GRAFTR SYSTEMS LTD keeps this page up to date as the product changes.