Last updated 24 May 2026

Security

Balloon Base is designed to keep business and customer data protected with sensible technical and organisational safeguards.

Access controls

User accounts are protected by authenticated sessions. Admin-only areas are restricted to authorised admin users. Users should enable strong passwords and protect their devices.

Data separation

App data is scoped to the logged-in user account. Admin tools are intended only for platform management and support.

Infrastructure

Balloon Base uses established infrastructure providers for hosting, database, payments, and email. Sensitive operational secrets are stored in environment variables and should not be exposed in client code.

Payments

Card payments are handled by Stripe. Balloon Base does not store raw card details.

Responsible disclosure

If you believe you have found a security issue, email support@balloonbase.co with details and do not access or modify other users' data.