Platform & Trust

Security & Data Isolation

Your store, your data, your money — locked down by design.

Every business on LentloSites lives in its own isolated data partition, logins are phone-OTP (no passwords to leak), and every rupee of order math is recomputed on our servers so browser tampering can't change what you're paid. Best of all, your sales money never passes through us — it goes straight to your own gateway, UPI, or bank.

Included on every planNo setup feeWorks on your phone

Start free — it's included See pricing

Included on every plan Platform & Trust

Included with

E-commerce Restaurant Kirana & grocery Business site Vehicles Finance Catalogue Travel Rental News Landing pages

How it works

What you actually do, step by step — most owners finish this from a phone.

Sign in with OTP, not passwords

You and your customers log in with a phone OTP — there's no password to forget, reuse, or leak in a breach.

Your data stays yours

Every record — products, orders, customers — is tagged to your business and every query is scoped to it. No other seller can ever see your data.

Money math is server-verified

Prices, GST, shipping, and discounts are recomputed from the database on every order. Whatever a tampered browser sends, the server's numbers win.

Payments are double-checked

Payment confirmations arrive over signature-verified, server-to-server channels — not just the customer's browser — so a captured payment always becomes an order.

Sales money never touches us

Customers pay into your own gateway account or UPI. We are non-custodial — we never hold, route, or delay your sales money.

Why it matters for your business

Non-custodial by design

Your revenue lands directly in your own accounts — there's no platform wallet holding your money hostage.

Tamper-proof orders

A customer editing prices in their browser changes nothing — the server recomputes every total from the database.

No password breaches

OTP logins mean there's no password database to steal.

Accountability built in

Sensitive changes are recorded in an append-only audit log — who changed what, and when.

What's included

The honest, complete list — limits stated where they exist.

Per-business tenant isolation on every data table — enforced in the platform core, not bolted on
Phone-OTP authentication for owners, staff, and customers
Every order re-priced server-side: subtotal, GST, shipping, coupons, and loyalty are never trusted from the browser
Payment webhooks are signature-verified, and a reconciliation job cross-checks captured payments against orders
User-submitted content is escaped against XSS before it ever renders on your storefront
HTTPS enforced everywhere, on subdomains and custom domains alike
Granular staff permissions — give your team exactly the access they need and nothing more
Append-only audit log of sensitive actions, viewable history of who did what

Common questions

Can another seller on the platform see my customers or orders?

No. Every piece of your data is tagged to your business and every read is scoped to it. Isolation is enforced at the platform core on every table.

What if a customer changes prices using browser tricks?

It won't work. The server recomputes every order from the database — prices, GST, shipping, discounts — and charges the server's number, not the browser's.

Do you hold my sales money?

Never. You connect your own payment gateway or UPI, and customer payments settle directly with you. We're non-custodial — your money never sits in a platform wallet.