Data, privacy & security
Two-factor auth, sessions, imports, exports and data retention.
13 articles
How do I set up two-factor authentication?
Protect your account with an authenticator-app code at sign-in, plus recovery codes for when you lose your phone.
Can't sign in — password resets and account recovery
Reset a forgotten password, sign in on a Google-only account, add a password to a Google account, and what to do if you're locked out of two-factor authentication.
How do I see and end active sessions?
See every device signed in to your account (and staff portal sessions), sign one out remotely, or sign out everywhere at once.
How do automatic sign-outs work?
Idle users are warned, then signed out automatically — with separate timers per role and for the customer portal, all tuneable.
How do I restrict the staff portal to my venue's network?
Limit staff PIN sign-ins to specific IP addresses so the portal only works from inside your restaurant.
Which security alert emails can I get?
Four security events can email the account owner — portal link rotated, portal disabled, a new IP signing in, and repeated failed PIN attempts.
How do I import customers, bookings or staff from a CSV?
Use the four-step Data import wizard to bring customers, bookings or staff over from another system, up to 500 rows at a time.
How do I export my data?
Where the exports live — bookings, customers, money records, loyalty, marketing codes, events and logs as CSV, per-customer JSON, and the full account export.
How long is booking data kept — and what do customers agree to?
Set the auto-delete period for booking data, and manage the cancellation, terms and privacy policies customers agree to when booking.
How do I bulk-delete data (tables, bookings, customers…)?
The Danger zone's seven permanent bulk wipes, their exact type-to-confirm phrases, and what each one deletes or keeps.
Quick answers
Still stuck?
Ask Rezo and get an answer on the spot — or email [email protected].