Security you can trust

    MenuKlik is built with security-first principles. Your restaurant's data and your customers' privacy are protected at every layer.

    Security architecture

    Six layers of protection — from your browser to the database.

    TLS 1.3

    Encryption in Transit & At Rest

    All traffic between your browser and MenuKlik is encrypted with TLS. Data in our Postgres database is encrypted at rest (AES-256) by Supabase.

    Supabase + Vercel

    Enterprise Infrastructure

    MenuKlik is built on Supabase — a Postgres database platform trusted by thousands of businesses worldwide — and deployed via Vercel's global edge network.

    RLS Enforced

    Row-Level Security

    Every piece of data in our database is protected by Row-Level Security (RLS). Each restaurant can only access its own data — it's not just policy, it's enforced at the database level.

    Privacy by design

    Privacy by Design

    We collect only the data needed to run the service, tracking cookies load only after consent, and we never sell your data to third parties.

    Managed infra

    High Availability

    MenuKlik runs on Supabase and Vercel — managed, redundant infrastructure — so your menu stays reachable for your guests.

    Edge Network

    Global CDN

    Menu pages are served from Vercel's global edge network, close to your guests wherever they are.

    Our data promise

    We believe in radical transparency about how we handle data. Here's exactly what we do — and don't do — with your information.

    • We collect only the data required to provide and improve our service.
    • We never sell your data or your customers' data to advertisers.
    • Restaurant owners can request a full export of their data at any time.
    • Data deletion is honored within 30 days of request.
    • Cookie consent is required before tracking cookies are set.
    • Our Data Processing Agreement (DPA) is published openly and applies to every customer.

    Standards we follow

    • TLS encryption in transit
    • Row-Level Security (RLS)
    • Cookie consent before tracking
    • WCAG accessibility guidelines

    Infrastructure

    • Supabase (Postgres)
    • Vercel Edge Network
    • Cloudflare Turnstile
    • Resend (transactional email)

    Found a security issue?

    We take all security reports seriously. Please contact us responsibly and we'll investigate promptly.

    Report a Vulnerability

    Have security questions?