No card data is stored in the public preview.
Security principles
Booked.ru uses a role-based safety model for guests, hotels, admins, integrations and platform operations.
- Tenant boundaries must be enforced for every organization, property, booking and task.
- Property-level access limits partner and staff users to owned or assigned objects.
- Admin global access is masked by default and must be audited.
- Действия с платежами, внешними каналами продаж, реальными бронированиями и сетевыми настройками требуют отдельного owner approval.
- Чувствительные настройки production-среды меняются только по отдельному согласованию.
Security and privacy principles
Production OAuth is disabled until secrets, callback domains and audit are approved.
Guest data is scoped to own account and displayed masked in preview.
Partner data is scoped to organization/property ownership boundaries.
Admin actions must be audited and dangerous operations require owner approval.
Bnovo, OTA, payment and booking writes stay disabled in this shell.