What keeps your work safe, in plain words
You run real businesses on Intersink: their money, their teams and their customers. This is how we protect all of it, what we will and won’t do with your data, and how to hold us to it. No jargon, and no claims we can’t back up.
Strong sign-in for everyone
Passkeys and 2-step verification come with every free User ID. Nobody pays extra to be safe.
The smallest key that fits
Roles in each business and again in each channel, so people see only what their work needs.
A record nobody can rewrite
The audit log keeps every change to money, access and settings. Not even we can edit it.
No selling, no ad tracking
We don’t sell personal data, and we set no advertising cookies. Optional cookies wait for your choice.
Six topics, each on its own page
Every page explains what the product actually does, where to find it, and which policy covers it.
Passkeys, 2-step verification, new-device confirmation, lockouts and sign-in alerts, plus the sign-in rules a business can set for its team.
Read morePrivacy
Cookie choices with no advertising cookies, the Privacy Center, data requests, and how businesses handle their customers’ data.
Read moreAccess control
How access works across User IDs, businesses and channels, the roles available, and the audit log that records every change.
Read moreTrust and safety
Notices, account status, the strike ladder, reviews and reporting a problem: how enforcement works and how to challenge a decision.
Read moreReliability
The public status page, how incidents are reported, and how the workspace keeps working offline.
Read moreYour dataWhat Intersink stores, where it is used, what never happens with it, and the controls you have.
Read moreYour account, locked the modern way
The same protections for every User ID, from a single shop to ten businesses.
Most account takeovers start with a stolen or guessed password. So we make it easy not to depend on one: add a passkey and your device does the proving, with nothing to type and nothing a fake website can capture.
Behind that sit the checks you would expect from software that moves money: a second step, confirmation on new devices, lockouts, alerts, and a full history of your security activity. Sensitive changes, such as removing a passkey, ask you to confirm it is you even when you are signed in.
- Passkeys
Sign in with a fingerprint, face or screen lock. They only work on our website, so they cannot be phished.
- 2-step verification
An authenticator app, a passkey or text message codes, with ten recovery codes for a bad day.
- New-device confirmation
A sign-in from a device we have not seen asks you to approve it from your email first.
- Lockout after wrong passwords
5 wrong passwords lock sign-in for that account for 15 minutes, and we email you.
- Sign-in alerts
Tell you when a new device signs in. Alerts about password or 2-step changes are always sent.
- Devices and activity
See every signed-in device and 180 days of security activity. Sign out anything you do not recognise.
Roles per business, and again per channel
One sign-in per person. What they can open after that is up to you.
How you sign in: passkeys, 2-step verification, devices and alerts. It stays yours if you leave a business.
The legal entity. Holds the team, billing, payout accounts, documents, sign-in rules and the audit log.
Its own principals and roles: Owner, Admin, Editor, Sales, Support, Viewer, or roles you create.
Each app’s settings choose which channel roles may use it.
Its own principals and roles: Owner, Admin, Editor, Sales, Support, Viewer, or roles you create.
Each app’s settings choose which channel roles may use it.
Invite people by email. They join with their own User ID, so nobody ever shares a password, and invitations expire after 14 days.
In a business, choose Owner, Admin, Accountant or Member, and which channels each person can reach. In a channel, pick from Owner, Admin, Editor, Sales, Support and Viewer, or build your own role on a grid of permissions.
The channel Owner role can never be edited, so there is always one way back in.
Who did what, when, and from where
Every action that changed money, access or settings in a business is written to its audit log. The log cannot be edited or deleted by anyone, including the owner and our own support team.
| Kind | Always logged |
|---|---|
| Money | Payouts, payroll locks, bill approvals, payout account changes and auto-pay limit changes. |
| Access | Invitations, role changes, removals and ownership transfer. |
| Data | Exports, bulk downloads, and opening an employee or patient record. |
| Settings | Anything that changes billing, security or public content. |
| Support | Reviews and verification steps Intersink staff take on your business, such as checking its documents. |
Nothing optional runs until you choose
The cookie bar offers Reject optional, Choose and Accept all. There is no advertising category, because we don’t use any.
The Privacy Center
- Download your data
A copy of what is on your User ID, sent as a link that works for 48 hours.
- Privacy requests
Access, correction or deletion, free of charge, each tracked with its legal deadline.
- What Intersink may use
Switch off product emails, analytics and personalised suggestions. It takes effect immediately.
- Delete account
Locked for 14 days so you can change your mind, then deleted.
The illustrated avatars you see across the product are drawn on your device from the name, so no names are sent anywhere to make them.
How privacy worksDecisions come with reasons, and a way to appeal
When Intersink limits something, you get a notice with what we decided, why, the rule it falls under and your options. Most decisions start with a warning.
- A notice arrives
Notices and reviews lists every decision about your account, business or channel.
- Read the details
What is affected, the rule, and whether an automated check, a person or a report found it.
- Request a review
Four steps: your reason, details, confirm it’s you, then check and send.
- See the outcome
Either the restrictions are removed, or we explain why the decision stands.
The strike ladder
A warning. Nothing is limited. The strike ends after 90 days.
One feature linked to the problem is limited for 1 day, such as adding outside links.
The same feature is limited for 7 days.
Limited for 14 days, and the channel or business is shown lower in marketplace search.
Suspended until a person reviews the whole account. You can still export your data.
Anyone can report content or behaviour, with or without an account. Reports are read by people, not only machines, and the person reporting gets a reference number and the outcome.
Automated enforcement can always be reviewed by a person. Even at the top of the ladder, you can still export your data.
Honest about problems, useful offline
The status page shows each part of the service on its own line, updated automatically and by a person during an incident.
- Every part on its own line
Panel, channels and shops, payments, payouts, email and SMS, and the API.
- Incidents stay listed
What happened, what we did, and what we changed afterwards.
- Offline reading
Pages you have opened stay readable without a connection.
- You always know
Offline, the app turns grey and says your changes are saved on this device.
Every policy, in one list
These are the formal documents. The trust centre explains them; the policies are what apply.
| Policy | What it covers |
|---|---|
| Terms of Service | The agreement between you and Svayam Incarnation Limited for using Intersink: your account, profiles, businesses and channels, paying, your rights as a consumer, what we may do if something goes wrong, and how either of us can end it. |
| Business and Channel Terms | Extra terms for businesses and for anyone who runs a channel on Intersink: verification, your duties to your customers and to the people and businesses below your channel, the tools you get to look after them, and our duties to you as a business user. |
| Cloud Services Terms | The extra terms for domains, DNS, servers, backups and other cloud services you order in Developers › Cloud: what we provide, what you are responsible for, and how ordering, renewal, suspension and ending work. |
| Acceptable Use Policy | What you must not do on Intersink, whether you use it as a person, a business, a channel operator or a developer. Breaking it can lead to the decisions described in the enforcement policy. |
| Enforcement, suspension and termination | How decisions about accounts, profiles, businesses, channels, developer accounts, projects, API keys and apps are taken on Intersink: who decides, what each decision does, the notice you get, how to appeal, how suspensions are lifted, and when and how something can be ended for good. |
| Fees, billing and refunds | How Intersink charges businesses and people: monthly invoices in arrears, credits, the developer fee, taxes, late payment, refunds and cancellation. |
| Refund Policy | When we return money: your rights as a consumer, refunds for businesses, apps, cloud services, domains and service credits. |
| Service Level Commitments | How available we aim to keep the platform and cloud services each month, how we measure it, and the credits you can claim if we fall short. |
| Privacy Notice | What personal data Intersink collects, why, how long we keep it, who we share it with, and your rights under UK GDPR, the EU GDPR and US state privacy laws. |
| Cookie Notice | The cookies and browser storage Intersink uses, and how to choose. |
| Data Processing Addendum | For businesses and channel operators: how Intersink processes your customers’ personal data on your behalf, under UK GDPR, EU GDPR and US state privacy laws. It forms part of the Terms and applies automatically. |
| Sub-processors | Companies that process personal data for Intersink. Subscribe to changes from Security and privacy in your business panel. |
| Data retention schedule | How long each kind of data is kept, and why. When the period ends, data is deleted or anonymised within 30 days. |
| Developer Terms | The terms for using the Intersink API: your channel’s own API (Settings › API), its test and live keys, and the developer program for apps published in the App Store or used by other businesses. |
| API Policy and guidelines | The rules for every use of the Intersink API: your channel’s own keys, test and live, scopes, data, security, limits, and what we check for apps that work with other businesses. |
| Advertising Policy | The rules for ads on Intersink: who can advertise, what we check before a campaign runs, what is never allowed, how clicks are charged, what we do with data, and what happens when an ad breaks the rules. |
| Ad Partner Terms | The terms for showing ads on your platform through the Intersink Ad Partner Program: who can join, how you show ads, what you earn and when you are paid, and what is never allowed. |
| Political Campaigns Policy | Extra rules for political parties, candidates, campaigners and their channels (for example the Rally app): transparency, donations, data and conduct. |
| Copyright and trademarks | How to report content on Intersink that infringes your copyright or trademark, what happens next, how the person affected can respond, and what we do about repeat infringers. |
| Legal and data requests | How requests about personal data, from authorities and courts, and about rights are handled on Intersink: who answers them, how fast, what we disclose and when we tell the person concerned. |
| Customer Declaration | What the owner of a business confirms when it is verified, when it orders paid services and when it changes its details. |
| Disclaimer | What our information, tools and third-party content are, and are not. |
| Trust and security | How Intersink protects your account, your businesses and your customers’ data. |
| Responsible disclosure | How to report a security problem, and what we promise in return. |
| Accessibility statement | Our commitment to making Intersink usable by everyone. |
| Company information | The company behind Intersink. |
Asked often
Does Intersink hold any security certifications?
Who operates the service?
Can my business make 2-step verification compulsory?
Can your staff see my data?
How do I report a security problem?
Where is the formal version of all this?
Build on something you can trust
Create a free User ID with passkeys and 2-step verification from day one. Add a business when you are ready.