Security

Trust starts with clear boundaries, accurate claims, and product behavior teams can inspect.

This page describes the current product posture based on the actual codebase and integration choices. It is a practical trust overview, not a substitute for formal compliance documentation.

Authentication

Merchant access uses Firebase Authentication. Customer queue joins do not require account creation, which keeps the public flow lighter and reduces unnecessary login friction.

Application data

Queue and merchant operational data are managed through Firebase and Firestore in the current architecture, with server-side billing enforcement logic where required.

Billing boundary

Billing is integrated through Dodo Payments. Product IDs are configured in the environment, checkout and portal flows route through Dodo, and public pricing is read from Dodo product data.

Operational controls

Venue limits, monthly join allowances, and analytics access are enforced in the app so account behavior is predictable as merchants move between plans.

Important Note

This trust page is intentionally conservative. It avoids making claims about audits, certifications, or controls that are not evidenced in the current product state.

Before a production commercial launch, a formal security review, infrastructure review, and legal review should be completed using the deployed environment rather than this repository alone.