Security at Ospitera

Data and where it lives

The database runs in the European Union. Every provider we use, where it processes data and what it sees is listed at /legal/subprocessors.

All traffic is encrypted in transit (HTTPS). Diner contact data and payment credentials are also encrypted at rest.

Accounts and access

Passwords and staff PINs are stored only as one-way hashes; IP addresses only as keyed hashes.

Each venue's data is separated from every other venue's; owners and staff only ever see their own venue.

Logins are rate-limited per device and per account. Devices that signed in before are recognised, so a flood of wrong guesses can't lock a restaurant out mid-service.

Sensitive actions are logged.

Keeping less data

Delivery address and notes are deleted 24 hours after an order is closed, phone number and surname after 72 hours, and unclosed orders lose them after 7 days. Order contents and amounts stay for the venue's accounting until it or the service ends.

We never use diner data for advertising, profiling or training AI models.

Monitoring and backups

Errors are monitored in the EU, configured not to collect diner contact data, cookies or request bodies. The database is backed up on our provider's schedule; if a backup is ever restored, deletions are applied again.

Your data export (switching)

Venue owners download their data at any time in the admin under Legal & privacy, and for 30 days after the service ends, at no cost.

Format: one JSON file (UTF-8), labelled "ospitera-venue-export/1". Top-level fields: exportedAt (time of export), format, venue (settings, menu categories with their items, opening hours) and orders (each order with its lines, amounts, status and times).

Left out: passwords, PINs, payment-provider keys and account ids, and personal data already deleted under the retention periods. The field names follow the admin's labels, so the file can be read by any JSON tool or imported into another system.

How switching to another provider works, with notice periods and our help during the transition, is set out in section 9.4 of the terms (/legal/terms).

If something goes wrong

We tell affected venues without undue delay, and within 48 hours of becoming aware of a personal data breach, as our data processing agreement (/legal/dpa) sets out.

Report a vulnerability

Found a security issue? Write to support@ospitera.com with the subject "Security". Please give us a reasonable time to fix it before you make it public, and don't access other venues' data or disrupt the service while testing. We thank everyone who reports in good faith.