← cashcall.io
🔐 Security & Privacy

Your data is yours. Period.

CashCall was built for restaurant operators who can't afford a data breach — financially or reputationally. Here's exactly how we protect your information, in plain language.

Zero-knowledge encryption

Every piece of financial data — invoices, payroll, sales, food costs — is encrypted with a 256-bit AES key before it leaves your browser. That key is generated on your device and never transmitted to our servers.

🔑
We never see your key
Your encryption key is generated in your browser using the Web Crypto API. It never travels over the network. Even our engineers cannot read your data.
🏛
Government subpoenas get encrypted gibberish
If a court ordered us to hand over your data, we would hand over encrypted ciphertext. Without your key it is mathematically unreadable.
✓
AES-256-GCM
The same encryption standard used by the US Department of Defense, major banks, and Signal. Breaking it with today's hardware would take longer than the age of the universe.

Database-level account isolation

Even beyond encryption, your raw data is isolated from every other account at the database row level using Postgres Row Level Security (RLS). This is enforced by the database engine itself — not just application code.

🛡
Row Level Security on every table
Every query your browser makes is automatically filtered to only your data by the database. A bug in our application code cannot leak another client's data — the database enforces the boundary.
🔒
Your session token is the only key
When you log in, Supabase issues a JWT (JSON Web Token) signed with your user ID. Every database query uses this token to enforce ownership. Logging out immediately revokes access.
👁
No employee access through the app
CashCall engineers use admin tools for operations and billing only — not the client-facing application. There is no 'admin view' of your dashboard.

Encryption in transit and at rest

🌐
TLS 1.3 everywhere
All data between your browser and our servers travels over TLS 1.3 — the same protocol used by your bank. There is no unencrypted path.
💾
AES-256 at rest
Supabase stores all database data encrypted at rest on AWS infrastructure using AES-256. Even a physical disk theft yields nothing readable.
☁
AWS infrastructure
CashCall runs on Vercel (frontend) and Supabase (database) — both hosted on AWS data centers with SOC 2 Type II certification and physical access controls.

Invite-only access

CashCall is not open to public signup. Every account is created through a personal invite link generated specifically for you.

🎫
Single-use invite links
Your invite link is a cryptographically random UUID that expires in 30 days and can only be used once. Once your account is created, the link is permanently invalidated.
🚫
No shared credentials
Each account has its own isolated database scope. There are no shared logins, shared demo accounts, or any data shared between clients.

Your data rights

ExportYou can request a full export of all your data at any time. We will deliver it as a JSON file within 24 hours.
DeleteYou can request permanent deletion of your account and all associated data. Deletion is irreversible and completed within 72 hours.
PortabilityYour data belongs to you. We will never sell it, share it with third parties for advertising, or use it to train AI models without your explicit consent.
TransparencyWe will notify you within 72 hours of any confirmed security incident that affects your account.
Questions about security?

We're happy to walk you through our architecture on a call before you sign up.

security@cashcall.io →
Last updated October 2026 · cashcall.io