Security
Your business data, looked after properly.
Where your data lives, who can see it, and how you get it out. No fine print.
Encryption in transit
Every app, the booking pages and this website are served over HTTPS, so data is encrypted between the browser and our servers.
Encryption at rest
Data is stored encrypted at rest in the database, in Sydney, Australia.
Credentials for Shopify, Lightspeed, Podium and WhatsApp are encrypted again inside the app, and no browser can read them back.
Access controls
Every business’s data is walled off from every other, checked by the app and again by the database on every request.
Within a business, roles decide what each person can see and do. Pay rates, settings and billing stay with the owner.
Workshop logs who opened customers’ personal details, and when. Owners read it in Settings → Privacy, and nobody can edit or delete an entry.
Two-factor sign-in
Two-factor sign-in isn’t available yet. Use a strong, unique password for your notjust. account.
Data retention
Your data is kept while your account is open, unless you delete it sooner.
When a business closes its account and asks for deletion, its data is removed from active systems within 30 days.
Workshop’s access records are kept for 12 months. When a Shopify store removes the app, its synced data is deleted 48 hours later.
Incident handling
We keep a written process for responding to security incidents.
If an incident affects your business’s data, we’ll tell you, as described under Breach notification.
Breach notification
If we become aware of a personal data breach affecting information we process for your business, we’ll notify you without undue delay, as set out in our Data Processing Terms, with what we know about what happened and what we’re doing about it.
Reporting a security issue
Email support@notjust.com.au with the details. Please don’t share it publicly until we’ve had a chance to fix it.
Subprocessors
Who helps us run the apps
The services that process data on our behalf, what each one does, and where. Each app’s privacy policy lists the ones that app uses.
Supabase
Vercel
Resend
Stripe
Google Fonts
Shopify
Lightspeed
Podium
Meta (WhatsApp)
Less admin. More getting things done.
See what your day looks like when the spreadsheets, messages and paperwork finally work together.