Security
How we protect your data and your clients' information.
Encrypted Connections
All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
Secure Authentication
Sign-in is handled by a trusted third-party identity provider. No passwords are stored on our servers.
Isolated Data Storage
Each business account's data is logically isolated. Your clients, bookings, and photos are inaccessible to other accounts.
Role-Based Access
Team members are granted specific roles (editor or viewer) with granular permissions controlled by the business owner.
Owner-Only Deletions
Only the business owner can delete data. Team members — regardless of role — cannot perform destructive actions.
No Third-Party Tracking
We do not use analytics trackers, advertising cookies, or any form of cross-site tracking on the platform.
Our Security Approach
Security is a core design principle at Stylisee, not an afterthought. As a platform that handles sensitive client data — including personal details, photographs, and wardrobe information — we take our responsibility to protect that data seriously.
Infrastructure Security
- Our platform is hosted on secure, managed cloud infrastructure with automated security patching
- All data at rest is stored in encrypted databases
- All data in transit is protected by TLS encryption
- We use managed database services with automated backups and disaster recovery
Application Security
- Authentication is delegated to a trusted identity provider — we never store passwords
- Session management uses secure, HTTP-only cookies
- All API endpoints require authentication, and admin-only endpoints have additional role checks
- Input validation is enforced on all user-submitted data
- Multi-tenant data isolation is enforced at the application layer on every database query
Client Photo & Wardrobe Security
Client photographs and wardrobe data receive the same security protections as all other data on the platform:
- Stored in encrypted storage accessible only to the business account that uploaded them
- Never shared with other accounts, third parties, or used for any purpose beyond displaying them to you
- Permanently deleted when the associated client record or account is removed
- Not indexed, scanned, or analysed by any automated system
Access Controls
- Business owners have full control over their data, settings, and team members
- Editors can create bookings, update client details, and add notes — but cannot delete any data
- Viewers have read-only access to business data
- Platform administrators can manage accounts but cannot access individual business data
Reporting Security Issues
If you discover a security vulnerability or have concerns about the security of your data, please contact us immediately at security@stylisee.com. We take all reports seriously and will respond promptly.