SCHEDARA
Security
Schedara uses layered controls to protect business, staff, customer, and appointment data.
Last updated September 14, 2026
Current safeguards
HTTPS protects data in transit. Secure, HTTP-only session cookies help protect signed-in sessions.
Passwords are stored using salted scrypt password hashing. Role-based access controls limit business and staff data access.
Uploaded files use private storage and authorized download paths. Payment-card handling stays with Stripe-hosted checkout and billing tools.
Request validation, same-origin checks, rate limits, and security response headers reduce common web risks.
Your role
Use unique password, restrict staff access to people who need it, remove access when roles change, and avoid collecting sensitive data not needed for scheduling.
Report vulnerability
Email Schedara support with affected URL, impact, reproduction steps, and supporting screenshots. Do not access, change, download, or disclose data belonging to others. Allow reasonable time for investigation before public disclosure.