PeakGauge turns your accounting and POS data into simple business insights - without giving unnecessary people access to your underlying financial information.
All data encrypted in transit (TLS 1.3) and at rest. Integration tokens encrypted with AES-256-GCM - the same standard used by banks and healthcare platforms.
Each salon's data lives in its own isolated vault. Row-Level Security at the database layer prevents one business from seeing another's numbers. We automatically test this isolation against a real database on every code change before it ships.
Square and QuickBooks connections (coming soon) use each provider's official OAuth and request the narrowest permissions they offer. PeakGauge only reads data - it never moves money, changes appointments, edits invoices, or writes anything back to your accounts.
We never see or store your Square, QuickBooks, or any integration password. You authenticate directly with the provider through their secure login - we only receive a limited, revocable access token.
Your business data is never used to train AI models. When generating insights, we only send aggregated metrics (e.g., 'revenue changed -8%') - never raw transactions, customer names, or payment details.
Delete your account anytime from Settings - no email required. Your business data is permanently deleted immediately and any subscription is cancelled. Only anonymized security logs and the billing records our payment processor must keep are retained.
Hosting
Vercel - provider holds a SOC 2 Type II report
Database
Supabase managed PostgreSQL, encrypted at rest - provider holds a SOC 2 Type II report
Payments
PCI DSS Level 1 certified processor
Authentication
Email/password or Google sign-in (PKCE flow). Two-factor authentication coming soon.
Questions about security? Contact us at info@ringerrival.com