---
title: How payments and deposits are secured in Reservics
description: Is Reservics secure? Deposits are processed through Shopify Checkout, so Reservics never stores card data. Refunds go back through Shopify automatically.
url: "https://www.apselo.com/docs/kb/security-and-payments/"
updated: "2026-06-26"
category: "Reservics / Trust & Security"
---

# How payments and deposits are secured in Reservics

Reservics processes every deposit through Shopify Checkout, so card details are entered and stored only on Shopify's PCI-compliant systems. Reservics never sees or stores card numbers. Each booking gets a unique 32-character token that secures its cancel and manage link, and refunds are issued back through Shopify to the diner's original payment method.

## Why Reservics is secure

Reservics is built as a Shopify app, so it inherits Shopify's payment security rather than handling cards itself. Three things keep your diners' money and data safe:

- **Deposits run on Shopify Checkout.** When a deposit is required, the diner is sent to Shopify's own checkout to pay. Card data never touches Reservics servers.
- **Cancel links are token-protected.** Each booking email contains a private 32-character link. Only someone with that link can manage or cancel the booking. No diner login or password is needed.
- **Refunds return through Shopify.** When an eligible booking is cancelled, the refund is issued through Shopify back to the original payment method.

## How a deposit is processed

*Deposits are a **Pro and Advance** feature. The Free plan cannot charge deposits.*

1. A diner picks a location, party size, date, and time in your storefront booking widget.
2. They fill in name, email, phone, and any custom fields you added.
3. If you require a deposit for that location, Reservics creates a Shopify draft order and sends the diner to **Shopify Checkout**.
4. The diner enters payment details on Shopify's secure checkout page. Reservics is not part of this step and receives no card data.
5. When payment succeeds, the booking moves from **Pending** to **Confirmed** and the seat is held.
6. The diner gets a confirmation email with a private "Manage your booking" link.

The deposit amount is set per location under the **Payments & Cancellation** tab on the Location detail page. You can charge a flat fee or use the "Deposit per guest" toggle to multiply the amount by party size. The currency comes from your Shopify shop setting and is read-only in Reservics.

## How the cancel link stays private

Reservics does not ask diners to create accounts. Instead, every booking is tied to a unique 32-character token that is embedded in the "Manage your booking" link sent in transactional emails.

- The token is the sole proof of ownership for that booking.
- It is long and random, so it cannot be guessed.
- Only the person who has the email (and therefore the link) can view, manage, or cancel the booking.

## How refunds work

When a booking is cancelled, whether a refund is issued depends on your refund window for that location, set under **Payments & Cancellation**.

| Refund window setting | What it means |
| --- | --- |
| Blank / default | Always refundable |
| 0 | Never refundable ("no refunds") |
| N minutes (N greater than 0) | Refundable only if cancelled at least N minutes before the start time |

- Diners can self-cancel and get a refund only inside the refund window.
- Staff can always cancel and refund an eligible booking from the **Booking detail** page in the admin.
- A no-show fee can also be configured per location.
- Every refund is processed through Shopify, back to the diner's original payment method.

## Frequently asked questions

### Is Reservics secure for taking restaurant deposits?

Yes. Reservics never collects or stores card numbers. All deposit payments are handled by Shopify Checkout, which is PCI-compliant, and refunds are issued back through Shopify. Reservics only stores booking details such as name, email, party size, and reservation status.

### Does Reservics store my customers' card details?

No. Card details are entered on Shopify's secure checkout and stored only by Shopify. Reservics creates a draft order and reads the booking's payment status, but it never sees or saves card numbers.

### How are deposit refunds processed?

Refunds are issued through Shopify back to the diner's original payment method. Whether a cancellation qualifies for a refund depends on the refund window you set per location. Staff can always refund an eligible booking from the admin, while diners can self-cancel for a refund only inside that window.

### Do diners need an account to manage their booking?

No. Each confirmation email includes a private "Manage your booking" link with a unique 32-character token. That token secures the booking, so no diner login or password is required.

### Are deposits available on every plan?

No. Deposits, refund policies, and no-show fees are available on the Pro ($9.99/mo) and Advance ($19.99/mo) plans. The Free plan cannot charge deposits.

## Related articles

- [Set up reservation deposits](/docs/product/reservation-deposits/)
- [No-show fees and refunds](/docs/product/no-show-fees-and-refunds/)
- [Deposits and refunds explained (for diners)](/docs/product/deposits-and-refunds-explained/)
- [Data privacy and GDPR](/docs/product/data-privacy-and-gdpr/)