Security
Your customers trust you with their details. You can trust us with them.
Converbold holds phone numbers, appointments and payment records for real people. Here’s exactly how we look after them, in plain language.
Passwords are never stored
We keep only a scrambled (hashed) version of your password, so nobody at Converbold can read it. Weak and common passwords are refused at sign-up.
Two-factor authentication
Turn on codes from an authenticator app such as Google Authenticator. Even if someone learns your password, they can’t get in without your phone. Backup codes cover a lost phone.
See every signed-in device
Settings shows each browser and phone signed in to your account, where and when. Sign any of them out with one click.
The right access for each person
Owners control everything. Managers run bookings without touching billing. Staff see only their own appointments and customers, never your payments or reports.
Card details never reach us
Deposits and subscriptions are paid on Paystack, Flutterwave or Stripe’s own secure pages. We only receive whether a payment succeeded, and we check every payment notification is genuine before acting on it.
Every business is kept separate
Each request is checked against the business it belongs to, so one business can never see another’s bookings, customers or settings.
Booking pages resist abuse
Public booking pages limit how many bookings can be attempted in a short time, so bots can’t fill your calendar with fake appointments.
Encrypted in transit
Pages and data travel between your browser and Converbold over HTTPS, so nobody on the same Wi-Fi or network can read them.
Your data, your exit
Download your services, team, customers and bookings as spreadsheets whenever you like, from Settings. Deleting your account deletes your business data with it.
What you can do today
Most of keeping an account safe is in your hands. These take a few minutes in Settings.
- 1
Turn on two-factor authentication
Settings → Account & security → Two-factor authentication. Keep your backup codes somewhere safe.
- 2
Give each person their own login
Invite people from Settings → Team & permissions instead of sharing your password, and give each the lowest role that does the job.
- 3
Check your devices now and then
Sign out anything you don’t recognise, then change your password.
- 4
Remove people who leave
When someone stops working with you, remove their access the same day.
Found a security problem?
Please tell us privately before telling anyone else. Email support@converbold.com with “Security” in the subject, the steps to reproduce it and what you think the impact is.
- We’ll reply within 2 working days and keep you updated until it’s fixed.
- We won’t take legal action over good-faith research that follows these guidelines.
- Only test with accounts you own. Don’t access other people’s data, run denial-of-service tests or send spam.
Run your bookings on something you can trust.
Free to start. Your data stays yours, and you can export it any time.