Security
Your data is yours. We take that seriously.
A plain-language summary of how MenuSpy handles security today. Not a certification claim. Not a warranty. Just the facts.
Guest report links
A purchased report opens through a private email link containing an access token. The server checks the token and its expiry before returning the report.
Anyone who has the complete link may be able to access your report. Treat it like a password and share it only with intended recipients. The link is available for 90 days; save a PDF if you need a lasting copy.
Guest report responses are marked private and no-store, and report pages request that search engines do not index them. These measures do not replace keeping the link private.
Data protection
All browser traffic to the application is delivered over HTTPS.
Core platform data is stored with managed cloud providers that support encryption at rest as part of their platform controls.
Account data is subject to access controls. Guest report access works through the private link described below.
Authentication and access
MenuSpy uses managed authentication for user sign-in and separate access checks for protected product routes.
Administrative and security-sensitive actions may be logged for operational review.
Users should apply standard account hygiene: strong passwords and appropriate account ownership practices.
Infrastructure and vendors
The current stack relies on managed providers for application hosting, authentication, storage, and selected AI or data-enrichment workflows.
Providers referenced in the product include Firebase, Vercel, OpenAI, and Google Maps/Places.
Third-party service availability and provider controls are part of the platform's overall security profile.
Limits and disclosures
No internet-connected application can guarantee absolute security.
This page describes current controls in plain language. It does not create a security warranty or replace a customer-specific security review.
For privacy terms and data-handling language, see the Privacy Policy.