Your money never passes through us.
What protects your payments, your data and your team today. Everything on this page is in place now.
Your money
Your money never passes through us
You connect your own Whish Money merchant account. Each payment goes from your customer straight to you. Cash is collected by your own team.
A payment is confirmed with the provider
A message that says “paid” is never enough on its own. We ask the provider directly before a payment shows as paid.
The amount is checked twice
Our server sets the amount, not the browser. If the provider reports a different amount, the payment is stopped and flagged for review.
Your data
Your data is kept apart
Each business or organisation has its own separate space in the database. One client's records cannot be read through another's.
Your credentials are encrypted
Your payment provider keys are encrypted. The key that unlocks them is kept outside the database.
Payment records cannot be rewritten
Once a money event is recorded, it cannot be edited or deleted. A correction, such as a refund, is a new entry next to the old one.
Your access
Each role sees only what it needs
Team members get a role. Only the owner and finance roles can confirm a payment by hand or refund one.
Sign-in is protected
Repeated wrong passwords are slowed down, and an account is locked after too many attempts.
Every action is recorded
When a team member confirms a payment, issues a refund or changes a setting, we record who did it, what changed and when.
A question about security? Contact us or write to hello@candledigitals.com.