SECURITY OVERVIEW

Your business.
Its own workspace.

Tymah separates business accounts and limits access to the people who need it.

Account access

Business owners use an email verification code to access subscription management. Initial workspace activation uses a private, single-use invitation. Staff sign in to the Scheduling application with their own accounts.

Separate businesses, controlled roles

Each business has its own appointments and setup. Owners manage configuration and staff access. Receptionists can manage appointments without changing business setup. Customer booking pages expose only public service and availability information.

Private booking links

Customer appointment links allow access to that appointment. Keep these links private. The public booking link for your business is the one to share broadly.

Payments and subscriptions

Subscription payments use Stripe’s hosted checkout. Tymah does not ask customers to enter card details into its own forms. Access to new bookings depends on current subscription authorization.

Custom domains

Premium domains require proof of DNS ownership and HTTPS configuration. A custom domain serves only its assigned business’s public booking pages.

Report a concern

Contact info@tuffops.com with a description. Do not send passwords, access tokens or customer records.