Security
Security built into the quote flow.
Delivery companies trust Qalt with pricing and customer data. Here is how the platform protects quotes, accounts and payments in plain terms.
Encrypted connection
Every page, quote form, and dashboard screen loads over HTTPS (TLS), protecting data in transit.
Payments by Stripe
Customers enter card details on Stripe's checkout page. Card numbers never reach Qalt or the delivery company.
Hashed passwords
Account passwords are stored as bcrypt hashes. Plain-text passwords are not stored in account records.
Account-scoped records
Merchant dashboard queries use the signed-in company to scope quote and account records.
Bot protection
Sign-up and demo access are guarded by Cloudflare's human check to reduce automated submissions.
For your customers
- The quote form on your website loads over HTTPS, so addresses, names, emails, and phone numbers are encrypted on the way to Qalt.
- When you take payments, customers pay on Stripe's own checkout page. Card numbers go to Stripe, not to Qalt and not to you.
- Shared quote links use random tokens. Payment success links use signed, expiring tokens. Anyone with a shared link should treat it as private and avoid forwarding it.
For your business
- Your password is stored as a bcrypt hash. Account records do not store plain-text passwords, and password resets use your account email.
- You sign in with a session cookie the browser keeps away from page scripts (HttpOnly).
- Merchant dashboard queries are scoped to your authenticated company. Public forms receive selected form and pricing settings, not the full account record.
- Sign-up is protected by Cloudflare's human check to reduce automated submissions.
Payments
- Enterprise payment-enabled forms open Stripe Checkout for the full quoted amount. You need a connected Stripe account before collecting payment.
- Qalt stores payment references and status, while card entry happens on Stripe Checkout. Charges use the delivery company's connected Stripe account, which handles Stripe fees, payout schedules and refunds.
Found a security problem?
Email us and we will look into it right away. Please include the page and the steps to reproduce it.
business@qalt.site