Security and data
Your money, your data, your brand.
The questions owners and accountants ask first, answered plainly.
Your own Stripe account
Payments go straight into your venue's Stripe account. Degusto never holds your money, and card fees are charged by Stripe at its standard rate.
Your customer data
Every buyer and every marketing opt in belongs to you. Consent is asked with an unticked box and recorded with its date and exact wording.
Runs in Sydney
The platform runs in Sydney, so pages load fast for Australian guests and staff.
Passkeys and two step sign in
Staff sign in with a passkey, such as Face ID, a fingerprint or Windows Hello, or with a password plus an authenticator code. Emailed sign in links still ask for the second step.
Locked down by default
Sign in pauses after repeated wrong attempts. Sessions end after four hours idle and every night at 3am. Staff are emailed whenever their sign in security changes, and an owner can reset a lost phone.
Every action logged
An activity log records who did what and when, from a resend to a refund.
A sale is created exactly once
Every payment message from Stripe is signature checked, and a voucher is issued exactly once, even if a browser closes halfway through paying.
Quiet where it should be
Rate limits on payments and sign in, strict security headers, and staff pages hidden from search engines and free of tracking.
Tested before every release
Hundreds of automated tests run before any change reaches a live venue.
Buyer details stay private
Checkout recordings are masked, and analytics never receive names, emails, messages or voucher numbers. Meta receives only a scrambled email and phone, to match ad sales.
Bring your accountant.
We are happy to walk through payments, data and access with whoever looks after your books.