Security is foundational to Celexerty. We take the protection of your business data seriously and implement industry-standard safeguards.
Accounts are secured with Firebase Authentication using email/password credentials and email verification. Sessions are maintained via HttpOnly, Secure, SameSite session cookies.
Each business's data is stored in isolated subcollections, and Firestore security rules enforce strict multi-tenant access controls. No user can access another business's data.
Permissions are enforced at the database layer based on user roles (Owner, Chef, Cashier, Kitchen Staff, Staff). Server-side rules validate every read and write operation.
Data is encrypted in transit using TLS and at rest within Google Cloud infrastructure.
Important actions — order changes, product edits, employee invitations, and transactions — are recorded in audit logs for accountability.
If you discover a security vulnerability, please report it to your business administrator immediately.
Last updated: October 2026