Security and data ownership

Your business data in Fiddle belongs to you, and good account hygiene keeps it safe alongside the protections Fiddle provides.

Your data is yours

You own the inventory, orders, customers, and records you create in Fiddle. You can export your data at any time, and you can cancel and take it with you. Fiddle uses encryption in transit and at rest to protect it.

Control who has access

Most security risk comes from too many people with too much access. To reduce it:

1. Give each user the least access they need via roles — see roles and permissions explained.
2. Remove or deactivate users promptly when they leave.
3. Reserve the admin role for the few people who truly need billing and settings.

Protect your sign-in

• Use a strong, unique password for your Fiddle login.
• Enable any available multi-factor authentication in your account settings.
• Never share credentials between people — invite each person their own user instead.

Fiddle support will never ask for your password or full payment card numbers. Treat any such request as a phishing attempt and report it.

Reporting a concern

If you suspect unauthorized access, change your password immediately, review your user list under Settings → Users, and contact Fiddle support.