Your customers are your business. Here is how we keep them safe.
No fine print. Ten plain facts about how Jetsy is built, each one true of the code that runs today. Then four things you can do on your side.
Your password is never stored
Jetsy keeps a scrambled version of your password (a “hash”) that cannot be turned back into the password. Not even Jetsy can read it. It is never written to a log. Passwords are at least 8 characters.
Everything travels locked (HTTPS)
Every page and every tap is sent over an encrypted connection. The app refuses to run over a plain, unlocked connection, so nobody on the same wifi can read what goes by.
Keys and secrets are sealed
The keys that connect your account to Stripe, the phone line and mail are sealed with strong encryption before they go in the database. The key that opens them is kept in a separate file outside the web folder. A copy of the database alone cannot open them.
Sign-in is guarded
Too many wrong tries from one place, or on one account, and sign-in locks for 15 minutes. A wrong email and a wrong password give the same message, so nobody can use the sign-in page to find out who has an account. The Jetsy account that can reach every customer’s records needs a second step to sign in: a code from an app on the owner’s phone, not a text.
Your session cannot be stolen by a script
The small file that keeps you signed in is marked so that web pages cannot read it, only travels over HTTPS, and is not sent along with requests from other sites. Signing in gives you a fresh session every time.
One-time links die after use
The link that sets a password, and the invite that adds a crew member, work once and then expire. Jetsy stores only a scrambled copy of each, so even a copy of the database could not use them.
No “injection” attacks on the database
Every question the app asks the database is written so that what a person types can never be run as a command. This is the standard way to stop the most common attack on web apps, and Jetsy uses it everywhere.
Each business sees only its own
Your customers, jobs, quotes, invoices and calls sit under your account. Your crew’s app shows them only the jobs you assign. Your customer’s private page shows them only their own job. Nobody else’s business can see yours.
Backups, and your own copy
The hosting company keeps backups of the server. On top of that, you can download everything on your board as a spreadsheet file any time. If you ever leave, take it with you.
We do not sell your data. Ever.
Not yours, not your customers’. No ads. Your call recordings and customer records are not used to train AI models. The companies that help run Jetsy (card payments, the phone line, texting, mail) get only what they need to do that one job.
Four things only you can do.
- Use a password you do not use anywhere else. A short sentence is easy to remember and hard to guess.
- Signed in on a borrowed or shared phone? Sign out when you are done.
- Lock your phone with a code or your face. Jetsy stays signed in on it.
- When someone leaves your crew, turn off their access in Crew. Their sign-in stops that minute.
What we do not claim. Jetsy does not hold a security certification, and this page does not pretend to be one. It is a list of what the code does. The full legal version is in the Privacy Policy. Questions about any of it: 480-710-9816.
Jetsy was built by a painting contractor for his own company. Pick a time that works and he will call the number you leave.
Calls 6am to 6pm Arizona time. Texts any time.
Try it with your own numbers, safely.
Free for 7 days, no card. Everything you put in is yours to download, any time.
No card for the free week. No contract. Cancel any time. Code CRM27 takes 27% off every month you stay.
