- Where the data sits
- Application, database and file uploads run exclusively in German data centres. No transfer to third countries without a legal basis.
- Encryption
- TLS throughout for transfer, passwords stored as hashes, bank details encrypted on top in the database.
- Who can see what
- Permissions follow the role and the location. A staff member sees the calendar, not the revenue.
- Tenant separation
- Each location sees only its own data. Every query checks the tenant, not just the role.
- Logging
- Sign-ins, permission changes and access to customer data are logged and visible in the dashboard.
- Your customers' rights
- You get access and export as a file on request. If someone deletes their own Terminz account, the person triggers that themselves in the system; we then lock and delete your file on them after fixed periods.
- Monitoring and backups
- Daily encrypted database backups, plus error and uptime monitoring from outside the system.
- Sub-processors
- Who we use is listed openly in the DPA. If someone is added, you hear about it beforehand.
- If you leave
- You export till and accounting data yourself, even after the contract ends until deletion. Everything else comes as a file on request. After the contract ends your data is kept for another 90 days; then it is deleted. The exception is the locked copy of your till and accounting records: it is kept for ten years, and on request we hand it over and delete it.