Encryption in transit and at rest, PCI-compliant payments through Stripe, and hosting on AWS. We only claim what we actually do.
Data is encrypted in transit with TLS and at rest on AWS, the same encryption AWS provides to every service it hosts.
We never store credit card data. All payments are processed through Stripe, a Level 1 PCI DSS certified provider.
Passwords are hashed with bcrypt, never stored in plain text. Sessions use unique, hard-to-guess tokens.
The platform runs on AWS with automatic backups and DDoS protection built into the infrastructure.
You and your customers can request a data export or deletion. See our privacy policy and DPA for the details.
If we detect a security issue, we investigate promptly and notify affected customers.
Customer booking data is encrypted at rest on AWS
Data in transit is protected with TLS
Credit card data is tokenized by Stripe. We never see the full card number
Payment processing happens directly between your customer and Stripe
Database backups are encrypted
Each organization's data is isolated from other organizations
EscapeBoost uses Stripe for all payment processing. Stripe is a certified PCI Service Provider Level 1, the highest level of certification in the payments industry.
We never store credit card data. When your customer enters payment information, it goes directly to Stripe. We only receive a secure token that represents the card.
Funds from bookings are transferred directly to your Stripe account. EscapeBoost collects our service fee automatically through Stripe Connect. We never hold your venue's money.
Standard Stripe processing fees apply: 2.9% + $0.30 per transaction. EscapeBoost service fees are separate and transparent to customers. Learn more about our fee structure.
| Standard | Status | Details |
|---|---|---|
| PCI DSS Level 1 | Via Stripe | Payment card data never touches our servers |
| Data rights | Supported | Data export and deletion on request |
Your booking widget needs to work around the clock. It runs on AWS with automatic backups and DDoS protection.
We monitor uptime and work to keep the platform available. We do not offer a formal uptime SLA yet.
We keep an eye on the platform and get alerted when something looks wrong.
Payments run on Stripe, which brings its own fraud and security tooling.
Have a security or privacy question? We are happy to walk you through how your data is handled.
Contact Us