Your customers' data, handled properly
Everything on this page is something turnda does today. Where we have not earned a claim yet, we say so further down rather than putting a badge on it.
Every business is isolated at the database level
turnda uses Postgres row-level security, forced on tenant data. That means the isolation is enforced by the database itself rather than by application code remembering to add a filter — the usual way this kind of thing goes wrong. An automated test fails the build if a tenant table is ever added without that protection, so it cannot quietly regress.
We collect only what a queue needs
Every visitor field — name, phone, party size, a note — is a switch the merchant controls, and each is off unless it is turned on. If your front desk does not need a phone number, do not ask for one. turnda is not a records system and holds no clinical, financial or identity data about your visitors.
Privacy on the lobby screen is enforced, not hidden
A display set to numbers-only is never sent the names in the first place — the restriction is applied where the data is read, not by hiding text in the page. That matters in a waiting room, where a screen is visible to everyone in it.
Secrets and personal data stay out of the logs
Diagnostics are scrubbed before they are written: values that look like an email address, a phone number or a key are redacted, and sensitively-named fields are removed at any depth. So the day-to-day operational trail your data passes through does not accumulate copies of it.
One channel failing does not take the product down
The free tracking link is the primary way a customer sees their turn; WhatsApp and email are best-effort extras on top. If a messaging channel has an outage — or a location reaches its monthly allowance — the tracking link keeps working, so nobody is left without a way to know it is their turn.
PDPA and GDPR-shaped, with real deletion
We support data-subject requests, and the things you put in — your business details, your branding — can be cleared by you rather than only by us. If you stop paying, your data is kept for 90 days so you can return, and can be removed on request.
The short, honest list
These are the companies that process data on turnda's behalf. It is a deliberately small list, and we will update this page before adding to it.
| Who | What they do | Notes |
|---|---|---|
| Fly.io | Application and database hosting | Primary region Frankfurt (eu-central) |
| Stripe | Payments and subscription billing | Card details go directly to Stripe — turnda never sees or stores them |
| Meta (WhatsApp Cloud API) | WhatsApp message delivery | Only when a merchant switches WhatsApp on for a line |
| Resend | Transactional email delivery | Join confirmations, updates and account email |
| Sentry | Error monitoring | Diagnostics only, with personal data and secrets scrubbed before sending |
What we do not claim
Trust pages usually list only the wins. Here is the other half — the things a careful buyer should know we have not done yet. If any of them is a blocker for you, tell us and we will give you a straight answer rather than a roadmap promise.
Ask us a security question- We are not SOC 2 or ISO 27001 certified. We will say so when we are, and not before.
- We have not commissioned an external penetration test. Our security work so far is internal adversarial auditing.
- We do not offer a signed enterprise DPA or a security questionnaire process yet. If you need one, get in touch and we will tell you honestly where we are.
- We have no uptime SLA. The product is designed to degrade gracefully rather than to promise a number we cannot yet stand behind.
Security questions we get asked
Can one business ever see another's data?
No. Isolation is enforced by the database through row-level security, and an automated test fails the build if a tenant table is ever introduced without it. It is not left to application code to remember.
Where is our data stored?
In Frankfurt, in the EU, on Fly.io infrastructure. If your regulator requires a specific region, tell us before you sign up rather than after — we would rather say no than mislead you.
Do you store card details?
No. Payment details go directly to Stripe. turnda never receives or stores a card number.
What happens to our data if we leave?
It is kept for 90 days so you can come back without redoing your setup, and can be deleted on request. Nothing is sold, and nothing is used to train anything.
Can we get our data out?
Yes — ask and we will provide it. We also support data-subject requests for individual visitors.
Do you have a security contact?
Yes — email hello@turnda.com and it reaches a person, not a queue. If you believe you have found a vulnerability, please tell us before disclosing it publicly and we will work with you.
Also see our privacy policy and terms.