Security at Boclar: how your data is protected.
Boclar keeps each business’s data separate and never stores card numbers. Team roles control access, and the privacy lock hides contact details and earnings on shared screens.
Security built into every layer.
Data kept apart
Your business’s data is kept separate from other businesses.
Password and PIN protection
Protect account access with your password and hide private details with a PIN.
Sign in your way
Use a password, or sign in with Google or Apple.
Roles decide who sees what
Each area is set to None, View or Manage for every role, revenue included.
Privacy on shared screens
Hide contact details, earnings or both while your team works on a shared screen.
Cards handled by Stripe
Card payments go through Stripe. Boclar never stores card numbers.
Every role sees only its part.
The owner sets roles in Settings › Team & permissions.
- Areas by role. Booking, calendar, counter sales, clients, locations, payments, reports, services, settings, integrations and team: None, View or Manage.
- Extra permissions. View client or team contact details, view revenue, export lists, block time for others and close locations.
- No revenue, no amounts. A role without revenue access still reads every report, with amounts left out: “Amounts aren’t part of your role”.
| Role | Calendar | Clients | Payments | Reports |
|---|---|---|---|---|
| Owner | Manage | Manage | Manage | Manage |
| Manager | Manage | Manage | None | View |
| Receptionist | Manage | Manage | None | None |
| Professional | Manage | View | None | None |
| Accountant | None | None | None | Manage |
The roles every business starts with. Every role can be changed, and you can add your own.
The privacy lock, for shared screens.
- Choose what to hide. Contact details, earnings, or both, behind a 4-digit PIN.
- It locks itself. After 1, 5 or 15 idle minutes, and every open tab locks together.
- Unlock with your PIN. Enter your PIN when you need to view hidden details.
- Keep details private. Contact details and earnings stay hidden while the lock is on.
- Downloads too. Files made while locked leave out money columns and say “amounts hidden” in the name.
Sample clients.
The services that run Boclar.
| Service | What it does |
|---|---|
| Supabase | Database and sign-in |
| Vercel | Hosts the web app |
| Railway | Hosts the server |
| Amazon Web Services | Email, SMS, file storage and DNS |
| Stripe | Card payments and subscription billing |
| Sentry | Error monitoring |
The full list, including WhatsApp and Google, is in the privacy policy.
Found something? Tell us.
Email us with the details and how to reproduce it. We confirm we received your report within 5 business days. Please don’t access other people’s data or disrupt the service while testing, and give us reasonable time to fix the issue before you share it.
Security, answered.
Is my data safe?
Your business’s data is kept separate from other businesses. Team roles control access, and the privacy lock hides contact details and earnings on shared screens.
Does Boclar store card numbers?
No. Card payments are processed by Stripe, and Boclar never stores card numbers.
Can I export my data?
Yes. Export your clients, services, team and locations to CSV, Excel or PDF, and download reports as Excel, CSV or PDF.
Can I hide earnings from my staff?
Yes, two ways. Roles can leave out revenue for good, and the privacy lock hides earnings, contact details or both on a shared screen.
I forgot my PIN. What now?
Choose Forgot on the PIN pad and enter your account password. After 5 wrong PINs, attempts are paused for 15 minutes.
Where is my data stored?
Your data is stored in the United States. Our privacy policy explains how personal data is used, protected and shared with service providers.
Private things stay private.
Start on Independent and set up roles and the privacy lock for your team.