Security

Separation between businesses

Every record belongs to one business. The database itself refuses to return a row to someone outside that business — it is not merely hidden in the interface.

Roles are enforced at the source

• What a person may do is checked on the server every time, not decided by the menu they can see.
• Nobody can promote themselves, move a staff record to another business, or grant platform-level access through a café role or an invitation.
• Money figures are visible only to people with money permission for that specific café.

Money records cannot be rewritten

• Placed orders, payments, refunds and cash movements are permanent; corrections are recorded as reversals with a written reason.
• Double-clicking never charges twice — a repeated action returns the same sale.
• Sensitive actions — price changes, discounts, drawer openings, voids, access grants — are recorded with who, when and why.

Accounts and sign-in

• Sign-in uses encrypted industry-standard authentication; we never see or store your password.
• Password reset and invitation links are single-use and expire.
• Staff access can be withdrawn instantly, ending active sessions.

In the browser

• The app refuses to be embedded in another site, blocking click-hijacking.
• A content security policy restricts where scripts, styles and connections may come from.
• Card details are never entered into or stored by HubsteriaBrew.

Support access

Platform support can only enter your café through a time-limited session that you can see in your own records. There is no silent impersonation.

Reporting a problem

If you believe you have found a security weakness, email admin@hubsteriabrew.com with enough detail to reproduce it. Please do not test against other businesses' data. We will acknowledge within three working days and keep you informed until it is resolved.