Passwords
There are none. Signing in is a single-use code sent by email, dead after 10 minutes, and an authenticator app can be added as a second step.
Security
Where your data runs, and what is never kept
Where BackendFree runs, what it never keeps in a readable form, how it handles the hard parts of bookings and payments, and what it does not claim.
In short
Everything is stored at DigitalOcean, LLC, Frankfurt, Germany. There are no passwords, no stored visitor IP addresses, no card numbers, and no artificial intelligence provider anywhere in the stack.
This page claims no certification. Every line is something the code or the deployment does. Updated 22 October 2026.
Where a request goes
Named from the deployment's settings- Your visitor's browser Every connection is encrypted, and an address asked for over plain http is sent on to https.
- Network providerCloudflare, Inc., worldwide, at the Cloudflare data centre nearest each visitor Every request passes through it first, which is why it is on the sub-processor list.
- BackendFreeDigitalOcean, LLC, Frankfurt, Germany Where the service and its data run.
- Image storageCloudflare, Inc., the European Union The images you upload. Each one is public to anybody with its address.
- BackupsBackblaze, Inc., Amsterdam, Netherlands Copies of the database, encrypted before they leave the host.
Never kept in a readable form
API keys
Stored in a form they cannot be recovered from, and shown once, when they are made.
Visitor IP addresses
Never stored. The key made from one cannot be reversed and changes every day.
Card numbers
They never reach the platform: a customer types them into the payment provider's own page.
The hard parts
Where a backend is easy to get wrong, and what stops it here
Two people, one slot
The database refuses the second booking, rather than a query that checked a moment earlier and was right at the time.
The hour that does not exist
Opening hours are local wall clock and instants are UTC, converted once, on the website's own timezone. Clock-change weekends included.
The moment money is real
Nothing confirms a booking except the payment provider itself. Coming back from a payment page confirms nothing, which is what stops a free appointment being one back button away.
Somebody else's personal data
Everything kept for an operational reason has a window it is deleted after, secrets are encrypted at rest, and API keys are stored as hashes. Your customers' names and emails are the part you cannot afford to improvise.
A price that is a cent out
Every amount is a whole number of the smallest unit, cents or rappen, from the database to the payment provider. A decimal or floating point money field fails the checks every release has to pass.
One website's content on another's
No API answer may be stored by a shared cache. A CDN keys on the address, and the address never says which website asked: the key does.
Not claimed
Said here, rather than found out later
CertificationsNone claimed. The measures are listed so they can be checked, and Annex 2 of the Data Processing Agreement is where they are committed to.
The documents behind this page
Retention, the other companies, and the commitments
- Privacy NoticeHow long everything is kept
- Sub-processorsEvery other company that can see any of it, and where
- Data Processing AgreementThe measures committed to, in Annex 2
- Acceptable UseWhat may not run on this
- Legal NoticeWho runs this
Questions
What people ask before they sign up
Where is my data stored?
At DigitalOcean, LLC, Frankfurt, Germany. The service and its data are hosted there, and the sub-processor list names every other company that can see any of it, and where.
Is my customers' data used to train AI?
No. There is no artificial intelligence provider anywhere in the stack, so nothing is sent to one.
Can I get a Data Processing Agreement?
Yes, it is already published. For your appointments, customers and visitors you are the controller and this platform is your processor. The agreement is that contract, with the measures and the sub-processors in its annexes.
What happens when I delete my account?
It goes, with everything in it. Each website's content, appointments, customers and analytics are deleted, then the account. Payment records stay, as accounting records. Deleting is refused while a website can still take payments, so that is switched off first.
Need this for a procurement form?
The Data Processing Agreement is published, and it is the processor contract you can hand over.