Secured site

Security & Privacy

This page is maintained by Ben Murray to answer common security questions about Rochester Concierge. It describes the app's current, in-use controls — not a formal certification.

HTTPS everywhere

Every page and API request is encrypted in transit with TLS.

Encrypted at rest

Your account data lives in a managed database with encryption at rest.

Row-level access control

You only see your own tickets and invoices. Staff access is scoped by role.

Account PIN

Every account gets a 4-digit PIN we can use to verify your identity before acting on your behalf.

Private attachments

Files you upload go to a private bucket and are shared only through short-lived signed links.

Sensitive information

We collect only what we need to help you — account numbers, service addresses, and vehicle/driver info are visible to Rochester Concierge staff to complete your request and are not sold or shared with third parties outside the vendors involved in fulfilling your service. Report a security concern to hello@rochesterconcierge.com.