Security and privacy

How access and records are protected

Sign in through your company account, see only the records your role allows, and keep every change on record. This page states what the product does in plain words.

Sign in and roles

Each person signs in with their own account

People sign in with a MAJIC account. The workspace is the MAJIC company, and the app role sits on top of that account. There is no shared company password in the app.

MAJIC sign in

Owners, managers, and chauffeurs open the app at /app/ and sign in with their own MAJIC account. Access is checked again on the server for every screen and every action.

Workspace by company

Every booking, customer, chauffeur, vehicle, and service record carries the workspace number. Queries stay inside that workspace, so one company never sees another company record.

Role access

Owners and managers see the full operation. Chauffeurs on a phone see only their own runs and their own vehicle. Customers need no account to request a quote.

  • Owners and managers can view and edit bookings, rates, the schedule, fleet, customers, messages, billing, and setup.
  • Chauffeurs can view their own day, complete the daily check for their own vehicle, and advance status on their own runs.
  • Buttons show only when the signed-in role can use them, and the server checks the permission again before saving.
  • A chauffeur who opens a run that is not theirs receives a plain message and no other customer detail.
Records

Every change is logged, without secrets

An activity log records who changed a booking, a rate, a vehicle, a message, or a person, and when. The log is append only in the app.

  • Creates, edits, status changes, assignments, and approvals are logged with actor, action, target, and time.
  • Log detail never holds passwords, keys, or personal notes. Saved sign-ins are sealed on the server and are never shown again on a screen.
  • Files attached to a record stay inside the workspace and are listed by the record they belong to.

What a manager can check

Open Activity to review recent changes by area and person. Open Team to see who has access, what role each person holds, and when each person last signed in. Deactivating a person stops new assignments and keeps past history for reporting.

Permits and certificates are manager only. Each chauffeur certificate and expiry, and each vehicle permit and inspection date, is recorded in settings and shown before it lapses.

Public links and messages

A public link shows only one booking

Customers book without an account. A secure link per booking shows only what that page needs, and no customer message is sent without a person approving it.

One booking per link

The public route finds the workspace from the booking record by its public token and returns only status, trip, total, and, from Driver confirmed, chauffeur name, vehicle, and direct line. It never returns other customers, internal notes, rates settings, or audit records.

Approved messages only

Confirmation, chauffeur details, on location, and thank you drafts are prepared from the booking. A person reads, edits, approves, or rejects each draft before it is sent, and the approved text is the text that is sent.

What is never stored

The public form asks for no card details. The app stores payment status and a payment method label only, never card numbers. VIP flag and spend history are staff only and never appear on public pages.

Chauffeur details stay hidden until call time

Chauffeur name, vehicle, plate, and phone stay hidden on public pages until the chauffeur confirms at call time. Call time is pickup time minus the lead hours setting, 3 hours by default.

Can a chauffeur see rates or other chauffeurs runs

No. Rates, company reports, and other chauffeurs runs are manager only. The phone view returns only runs where the signed-in chauffeur is the assigned chauffeur and only that chauffeurs own vehicle.

Can a customer see another customers booking from a link

No. Each link carries an unguessable token for one booking. The page returns only that booking, and a guess or a changed token finds no record.

How does a customer correct or remove personal information

Contact the company through the request form or the phone number on the booking confirmation. Staff can correct a customer record, export the workspace records for bookkeeping, and record what was changed or removed.

See access and records in a walkthrough

Request a demo and review sign in, roles, and the activity log with your own day to day tasks.