Your data belongs to you

Bellora is operated in the European Union, in the Frankfurt region. So data residency lies in Germany or the EU – an important criterion for German and Spanish studios that value EU hosting. All traffic runs encrypted (HTTPS/TLS).

Your studio's data is strictly separated from that of other studios – you see and change only your own. This separation isn't merely a hiding in the interface but is built in fundamentally: a foreign request never reaches your data. Within your studio the role decides who may do what – money views, for example, are seen only by the owner, an admin or explicitly authorized people.

A payment in Bellora is only a receipt: amount, currency, payment method, note. There's no field in the system for a card number, CVV or bank account number – the actual card payment happens outside (terminal or cash). That removes the worry of card-data liability. And the app forgoes tracking: the data types collected serve only the app's function, not advertising.

Sign-in is by email and password only – no social login, no self-registration. And you keep control to the very end: an account deletion under Art. 17 GDPR is possible as self-service. Important events around money and invoices leave a traceable trail (who, what, when).

Part of honesty is claiming nothing that isn't backed up. Formal contract documents like the data processing agreement (DPA), the list of subprocessors and the legal bases per processing belong in your privacy and contract documents – ask us for them instead of relying on marketing promises. Here too the rule holds: what Bellora shows you is real.