Who sees your numbers?
You, and whoever you invite, with the role and scope you set. Everything below is what runs today, not a promise.
- You, and whoever you invite
- Owner, manager, accountant, view-only, or a custom role. A user scoped to some outlets (an outlet is one brand at one branch) sees nothing else and cannot manage the team or the subscription.
- The BASE team only for support
- A banner shows in your account for the whole session, and the visit is written to your company's own activity log.
Your data is yours
Full export in open formats at any time and at contract end. We commit to it in every contract, and it is written into the terms.
Each company isolated
Each company's data is separated from every other, and a user sees only what is in their scope. An accountant serving several restaurants switches between them; they never mix.
Every sensitive change is logged
Who, when and what: companies created, commission rates, invitations, uploads and approvals, even support visits. The log cannot be edited from the interface.
A backup every night, and restores that are tested
A nightly backup, a backup before every deployment, and a real restore test recorded in the operations console. Nothing is hard-deleted from the interface.
Transport and browser
HTTPS enforced with HSTS. A strict content security policy: scripts run only from our own files. Cookies are secure and site-restricted.
API keys
One key per connected system, shown once then masked, revocable at any time. The API accepts HTTPS only and limits calls to 120 a minute.
The Saudi PDPL
We commit to the Saudi Personal Data Protection Law: a written privacy policy, and the personal details in the request form used only to contact you about FoodBooth. The hosting location is stated in the privacy policy. The public site counts visits without cookies.