Data Security

Your books are the heart of your business. This page explains, in plain words, how KarbarX keeps them safe. It complements our Privacy Policy.

1. Each business is separate

Every Workspace's records carry its own business identity, and every screen, report and search is limited to the Workspace you are signed in to. Branches inside a business can be kept apart too, so a showroom manager sees only their showroom where you choose that.

2. Encryption

• All traffic between your device and KarbarX uses HTTPS.
• Passwords are stored only as one-way hashes; nobody at KarbarX can read them.
• Secrets such as connected-calendar tokens, phone-line passwords and API keys are stored encrypted.
• Browser security headers protect pages against common attacks such as clickjacking.

3. Login protection

• Two-step login with a key file — the key is created in your own browser and protected by a passphrase that never leaves your device. KarbarX stores only the public half, so a stolen password alone is not enough to sign in.
• Authenticator app codes and single-use recovery codes are also supported.
• Repeated wrong passwords or PINs are slowed down and locked for a while, on the main login, the customer portal and the staff app.
• Users with a key file are signed out automatically when the browser closes or after 30 minutes without activity.
• Changing login security signs out every other device and sends the owner a notice.

4. Control over staff

• Roles and permissions decide exactly what each person can see and do — a cashier need not see reports, a salesman need not see buying prices or profit.
• You can suspend a staff member or sign them out of every device instantly, and limit how many devices one person can use at the same time.
• An audit trail can record who created, edited or deleted what, and when.

5. Backups and recovery

• The whole database is backed up on a regular schedule. Each backup is checked to be complete before it is kept.
• Copies are kept on the server and in separate private cloud storage that is not publicly reachable and is encrypted at rest by the storage provider.
• Before any restore, a safety copy of the current data is taken first.
• Workspace owners can export their reports and data at any time — your data is never locked in.

6. Apps for staff, customers and partners

• The staff app shows salary, tasks and call lists only after the employee's own PIN, which locks for a while after repeated wrong tries.
• Customer portal links from a memo open only that memo until the customer proves who they are.
• Partner and investor links are long random codes protected by a PIN; a PIN reset or new link signs out phones already opened.
• Pages with private figures are never stored in the phone's offline cache.

7. AI, phone and third parties

• The AI assistant reads your figures only through read-only tools limited to your Workspace and to what the asking user is allowed to see. It cannot change your books by itself — any change waits for a person to tap Apply.
• Answers with numbers that do not match your books are rejected and replaced with the raw figures.
• Phone-line passwords never leave the server, staff calling uses one-time tickets, and in the staff app staff never see the customer's private number.
• Service providers (hosting, storage, SMS, telephone, AI, speech) receive only what is needed for the feature you use. See the Privacy Policy for the list.

8. Our own team

Only a small number of KarbarX staff can reach the systems that run the Service, and our support team opens a Workspace only to give support or fix a problem. Actions taken by our support staff in the control panel are logged. We do not look through your books for any other reason.

9. If something goes wrong

We monitor the Service for errors and unusual activity. If we learn of a security incident that affects your data, we will act to stop it, tell affected Workspace owners without undue delay with what we know, and explain what we are doing about it.

10. What you can do

• Turn on two-step login for owners and managers.
• Give each staff member their own login and only the permissions they need; remove people who leave.
• Hide buying prices and profit from staff who do not need them.
• Keep your phone and computer updated and never share your key file passphrase.

11. Report a security issue

If you believe you have found a security weakness in KarbarX, please email karbarxtechnologies@gmail.com with the details and do not access other people's data. We will reply, investigate and fix confirmed problems as quickly as we can.