Security
Last updated: 19 June 2026. BuzBill uses practical technical and organisational safeguards to protect restaurant billing, user and operational data.
1. Security approach
BuzBill follows a risk-based security approach for its website, applications, infrastructure, support workflows and internal access. Security controls are designed to protect confidentiality, integrity and availability while keeping restaurant operations practical for owners, managers, cashiers and support teams.
2. Customer account protection
- Create separate users for owners, managers, cashiers, kitchen staff and back-office users.
- Use strong passwords and restrict admin access to trusted people only.
- Review staff access when employees leave or change roles.
- Protect POS devices with screen locks, operating-system updates and controlled physical access.
- Immediately report unknown logins, suspicious bills, unexpected refunds or configuration changes.
3. Platform safeguards
BuzBill may use safeguards such as HTTPS, access controls, role permissions, logging, backups, environment separation, server hardening, secure deployment practices, monitoring, vulnerability review and controlled staff access. Exact controls may vary by product, hosting environment, plan, integration and customer configuration.
4. Data access by BuzBill staff
BuzBill staff or authorised service providers may access customer account data only when needed for onboarding, support, troubleshooting, billing, security, legal compliance or service improvement. Internal access should be limited to authorised personnel and may be logged or reviewed.
5. Backups and recovery
BuzBill may maintain backups and logs to support service continuity, troubleshooting, compliance and disaster recovery. Backup availability, retention and restoration timelines depend on the product plan, hosting setup, customer configuration and incident type.
6. Vulnerability reporting
If you believe you have found a security issue, email support@buzbill.com with a clear description, affected page or endpoint, steps to reproduce, screenshots or logs where safe, and your contact details. Do not access, modify, delete, download or disclose data that does not belong to you. Do not run destructive tests, social engineering, spam, denial-of-service attacks or attacks against third-party systems.
7. Incident handling
When a security incident is suspected, BuzBill may investigate logs, restrict access, rotate credentials, patch systems, notify affected customers, work with service providers and take other steps required to contain and resolve the issue. Notification timing and content depend on the nature of the incident and applicable law.
8. No guarantee
No website, application, network or device can be guaranteed to be completely secure. Customers should maintain offline records or exports required for business continuity, protect local devices and promptly report issues.
9. Contact
Security reports and support issues: support@buzbill.com