Security

Last updated: October 14, 2026

booqoo is built to protect creators and their customers.

• Encryption in transit (TLS) and encrypted storage of third-party tokens and secrets
• Every request checks who you are and which business you belong to; teams see only their own data
• Signed webhooks and payment verification before anything is marked paid
• Least-privilege access for our team, with logging and two-factor authentication on admin accounts
• Regular dependency updates and security reviews; backups with tested restores
• Incident response: we investigate promptly, tell affected customers without undue delay, and notify authorities where required

Report a vulnerability: email support@booqoo.com with steps to reproduce. Please give us reasonable time to fix before disclosing, do not access other people's data or disrupt the service, and do not run denial-of-service tests. We will not pursue legal action against good-faith research that follows these rules.

We do not currently hold SOC 2 or ISO 27001 certification.