Security
Security and Data Handling
A plain account of how BookTaxiService handles your data, payments and access.
This page describes the controls in the platform and says where they depend on configuration. We do not claim certifications we have not been given.
Data
Your Operator Data
Each operator’s records are scoped to that operator inside the application, so staff work only with their own bookings, drivers and customers.
Error monitoring redacts specified credential and payment fields, and the server-side filter also redacts recognised contact patterns before reports are sent.
Payments
Card Payments
Card details are entered into Stripe’s secure payment fields and processed by Stripe, using your own Stripe account. BookTaxiService does not store full card numbers.
When a customer saves a card, we keep Stripe’s reference for it plus the last four digits, expiry date and cardholder name, so the card can be recognised next time.
Hosting
Hosting and Connections
The platform runs on DigitalOcean infrastructure in the Sydney region.
The application is served over HTTPS at www.booktaxiservice.au.
Access
Admin Access
Admin access is role-based, so operator staff, drivers and customers each see only what their role allows.
Platform administrators can turn on two-factor authentication for their accounts. It is optional, not enforced for every user.
Backups
Backups
The backup scheduler runs daily and copies the database and public uploads to separate S3-compatible storage. All backups are kept for seven days, then daily backups for a further 30 days; a storage limit can remove older backups sooner, and the newest backup is always kept.
Deletion and contact
Account Deletion and Security Contact
Customer deletion requests have a seven-day grace period. A daily process then removes or anonymises supported account and related records; some secondary records and existing backups remain. Active bookings prevent deletion, and it also waits while scheduled card authorisations are unresolved.
To report a security concern, email hello@booktaxiservice.au. Security reports go straight to the people who build and run the platform.