Security

1. Our approach

Keeping your data safe is fundamental to GetPizza. This page explains, in plain language, the measures we use to protect your information. We follow industry-standard practices and continuously review them.

Questions about security? Email us at privacy@getpizza.digital.

2. Encryption

In transit: all connections to GetPizza are protected with TLS (HTTPS), so your data is encrypted while it travels between your device, our services, and our database.

At rest: your entire database and its backups are encrypted on disk using AES-256 — the same standard used by banks and major cloud services.

Sensitive credentials (such as the keys used to connect your own external accounts) receive an additional layer of AES-256 field-level encryption, with the keys held separately from the database — so they remain protected even in the unlikely event of a database compromise.

3. Access control and workspace isolation

Each workspace's data is strictly separated from every other workspace, and enforced at the database level — one customer can never see another's data.

Within your workspace, sensitive actions and settings are limited to workspace owners and admins. Access to production systems by our team is restricted on a least-privilege basis and is logged.

4. Authentication

Sign-in is handled by a specialized authentication provider. Passwords are never stored in a readable form — they are protected using one-way hashing. We support secure sign-in with your existing Google account.

5. Payments

All payments are processed by a PCI-DSS-certified payment provider. We never see or store your full card details on our own systems.

6. Hosting and infrastructure

GetPizza runs on reputable, security-certified cloud infrastructure across Europe and the Americas, with data primarily processed in the European Union. Where data is transferred outside the EU, that transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses. See our Privacy Policy for details on data location and your rights.

7. Reliability and backups

Your data is backed up regularly, and backups are encrypted. We monitor the Service for availability and errors so we can respond quickly to any issue.

8. Your role in keeping data safe

Security is a shared responsibility. Use a strong, unique password, keep your devices secure, and be thoughtful about who you invite to your workspace and whom you make an admin — admins can see and manage more of your workspace's data.

9. Reporting a vulnerability

If you believe you have found a security issue, we want to hear from you. Please email privacy@getpizza.digital with the details, and allow us reasonable time to investigate and address it before any public disclosure. We appreciate responsible disclosure.

10. Changes to this page

As our security practices evolve, we may update this page. When we make material changes, we will update the "Effective" date above.