Security & trust

    Built to protect your business and your customers

    Rental software holds customer PII, payment status, and signed waivers. Here is how InflataHQ approaches security and data handling.

    Tenant isolation

    Each rental business runs in its own tenant. Inventory, bookings, customers, and waivers stay scoped to your account - not mixed with other operators.

    Encryption in transit

    Dashboard, booking, and API traffic use HTTPS. Session cookies are httpOnly and secured for production deployments.

    Waiver & booking records

    E-signed waivers are stored as PDFs tied to bookings so you can retrieve documentation when you need it - without paper clipboards.

    Role-based access

    Owner, staff, and crew roles limit what team members can see and change. Invite teammates without sharing a single login.

    Payments

    Customer card payments process through Omega Bank Card (NMI). InflataHQ does not store full card numbers. Platform subscription billing is handled separately from customer rental payments.

    Subprocessors

    We use trusted providers for payments (Omega / NMI), email (Resend), maps, and cloud hosting. See our Data Processing Agreement and Privacy Policy for details. A current subprocessor list is available on request at hello@inflatahq.com.

    Questions about security?

    We are happy to walk through how tenant data, waivers, and payments are handled.

    Security | InflataHQ