Data security
Your boutique's data, kept safe
Measurements, customer photos, stock and khata balances are private. Here is exactly how we protect them. Every point on this page is something the app does today.
Last updated:
What we do
How your data is protected
Twelve simple safeguards, working every day in the background.
Every boutique kept separate
Each boutique's customers, orders, photos and money records are tied to that boutique. Every request is checked, so one boutique can never see another's data.
HTTPS everywhere
Every page and every app request is encrypted in transit with HTTPS, with strict browser security headers switched on.
Passwords are hashed
Passwords are stored only as a one-way bcrypt hash. Nobody, including our team, can read your password. Resetting it signs out every old session.
Safe one-time login codes
Codes sent on WhatsApp or email are random, stored only as a hash, expire quickly, work once, and allow only a few tries.
Limits on login attempts
Repeated wrong logins and code requests are slowed down and blocked, which stops password-guessing attacks.
Logins by role
Owner, co-owner, staff, tailor and helper each get their own login and see only what their role needs. Remove a login the day someone leaves.
Checked photo uploads
Only image files are accepted. We check the actual file content, not just the file name, before saving it.
Secrets stored encrypted
Payment gateway keys and similar secrets are encrypted before they are saved, and are never shown back in the browser.
No card details stored
Card, UPI and bank details are entered on the payment gateway's page. Payment confirmations are verified with the gateway before a plan is switched on.
Daily backups
The database and uploaded photos are backed up automatically every night. Backups are kept for 30 days.
Hosted in India
Our servers are hosted in India. Website traffic passes through Cloudflare, which helps block attacks and keeps pages fast.
Support access is logged
When you ask for help, our support team can open your account through a time-limited support session that is recorded.
Our promise
What we never do
- We do not sell your data, or your customers' data, to anyone.
- We do not put ad trackers inside the logged-in app where your records are shown.
- We do not contact your customers for our own marketing.
- We never ask for your login code or password on a call or WhatsApp.
Your part
Simple habits that help
- Use a strong password and do not share it. Give each person their own login instead.
- Never share a one-time login code with anyone, even if they say they are from SmartBoutique.
- Keep your phone locked, and sign out on shared computers.
- Remove staff and tailor logins as soon as they leave your boutique.
- Check your bills and balances, and download important reports from time to time.
Found a security problem?
Please tell us privately at security@quantumbytes.co.in or support@quantumbytes.co.in, with steps to see the problem. Please do not test on other boutiques' data. We read every report and reply as fast as we can.
More detail: privacy policy · terms of service
Who runs SmartBoutique
QuantumBytes
- Address
- H.No S-297, Village Ugoke, Tehsil Tapa, Barnala, Punjab 148108, India
- GSTIN
- 03ITGPS1363P1Z3
- Email (also grievance contact)
- support@quantumbytes.co.in
- Phone / WhatsApp
- +91 94782 10404 · Mon–Sat, 10am–7pm
Keep your boutique records safe
Move from paper slips and loose notebooks to one secure app. Try every feature free for 14 days, no card needed.