Personal data and security
Where is my clients' data kept?On your website, on your hosting. The appointments, clients, notes, payments and documents do not leave your WordPress. You are the controller of this data.What does Tickabell see of my data?Tickabell does not see your appointments and clients. The plugin sends our server only details about the website, to check the licence and the updates.How do I erase a client's data?In WordPress open Tools › Erase Personal Data, enter the client's email and confirm the request. Tickabell erases their appointments, profile, ratings and emails.How does automatic erasure of old data work?In Tickabell › Settings › Booking rules set “Delete client data after (months)”. Past bookings and their files are erased automatically after that period. 0 keeps them for ever.How do I download all my data?In Tickabell › Settings › Data click “Download everything (ZIP)”. You get one file with the appointments, the clients and the rest of the Tickabell data.How do I switch on two-step sign-in?Each person switches it on in their WordPress profile, under “Two-step sign-in”, with a code by email or an authenticator app. In Tickabell › Settings › Sign in you can make it required for administrators.How do I change the login address?In Tickabell › Settings › Sign in tick “Use the Tickabell login page” and enter your own address, for example login. “Hide it – sign in only through the address above” hides the standard WordPress login.How does the team log in?The team logs in through the login page in the website's design. Copy the “Link for your team” from Tickabell › Settings › Sign in and send it to each team member.How do I stop spam in the form?The form always has a hidden trap field and a limit on attempts. For extra protection enter the free Cloudflare Turnstile keys in Tickabell › Settings › Spam protection.My website is behind Cloudflare. What do I choose for the IP address?In Tickabell › Settings › Spam protection, under “Site is reached through”, choose “Cloudflare (CF-Connecting-IP)”. Otherwise all visitors look like a few Cloudflare addresses and the limit may block real clients.