Skip to content
ArkilaHub

Security and data

How your customers' documents and your business data are kept

Your customers hand you their driver's licence because they have to. This is exactly what happens to it, and to everything else in your account, written as what the system does rather than what we would like it to sound like.

Your data is yours alone

Every record carries your company, and no query in the system can return another business's customers, bookings or files.

Two-factor sign-in

Required for business owners and available to every staff account, with recovery codes for the day a phone goes missing.

Staff roles and permissions

Each person signs in as themselves. Your booking desk does not see refunds, and your finance staff do not edit the fleet. Staff accounts are part of Pro.

An append-only audit trail

Who changed what, when, and from which IP address and browser, kept so it cannot be quietly tidied up afterwards.

Passwords and sessions

Passwords are stored only in a scrambled (hashed) form, and accounts are signed out after a period of inactivity. You can sign out every other device from your account.

Encrypted connections

Our website and every booking website run over HTTPS, including a rental company's own domain.

Customer documents

What happens to a driver's licence

Licences, selfies, government IDs and payment receipts all travel the same path. None of them ever sits on a public address that anybody with the link can open.

  1. 1

    Uploaded to the booking

    The customer sends the photo from their phone, after ticking that they agree to its use.

  2. 2

    Kept in private storage

    Outside the part of the server the web can reach, filed under your company.

  3. 3

    Opened through a signed link

    Each link works for 15 minutes, and only for somebody signed in to your company.

  4. 4

    Seen by your team

    Never shown to other customers, and never used by ArkilaHub for anything of its own.

  5. 5

    Every view recorded

    Who opened which file, and when, is written to the audit log.

We never hold your payments

There is no payment gateway. Your customers pay you directly by GCash, Maya, bank transfer or cash, and ArkilaHub keeps the record of it on the right booking. No card details are taken on this site, from you or from your customers.

What we do not claim

ArkilaHub holds no security certification and follows no named standard, so this site does not mention one. What is listed on this page is what the system does, and you are welcome to judge it on that.

Where the data lives

ArkilaHub runs on Hostinger’s servers, with traffic carried and protected by Cloudflare. Both may store information outside the Philippines. The privacy notice names everybody who handles it, and why.

Your part in it

You decide who on your team has an account and what their role allows, and you write the privacy notice your customers read. Until you do, your booking website shows a standard one describing how it stores their documents.

Found something that looks wrong, or a way into data that should not be reachable? Tell us and a person will look at it.

Turn your next Messenger enquiry into an organized booking.

Try every Pro feature with your real vehicles and bookings for 14 days. No card and no automatic charge.

  • 14-day Free Trial with full Pro access
  • No credit card required
  • No automatic charge
  • Free plan after the trial
  • Works on your phone