MaitreSecurity
In short
We protect restaurant and guest information with encryption, strict database rules, signed widget sessions and optional multi-factor sign-in, and we keep guest chats only 90 days. We hold no security certification, and no internet service is perfectly secure. Report a security problem to team@hiremaitre.com.
1. How the service is built
- Our database host encrypts stored data with AES-256, and every connection uses TLS.
- Database rules let each restaurant reach only its own data; secrets and provider keys stay on our servers.
- The widget uses short-lived signed sessions tied to the restaurant and its approved websites.
- Owners can turn on multi-factor sign-in; new devices are confirmed by email.
- Sign-in, sign-up and password reset are protected by Cloudflare Turnstile, rate limits and a web application firewall.
- Prices and catalog items are checked on our servers before any order or checkout; card details go only to Square or Stripe.
2. Data we keep, and for how long
Guest chats are deleted after 90 days, voice audio is never stored, and the full table is in the Privacy Policy. Our providers are listed on the Subprocessors page.
3. Reporting a security problem
Email team@hiremaitre.com with what you found and how to reproduce it. Please give us time to fix it before telling others, do not access or change other people's data, and do not disrupt the service. We will reply and keep you informed.
4. What we do not claim
Maitre is in controlled availability. We hold no SOC or ISO certification and make no promise that the service is free of weaknesses. If we confirm a breach affecting guest information, we tell the affected restaurant within 72 hours.