Security & responsibilities
Private progress. Reviewed actions.
Useful safeguards for everyday local rewards, with clear responsibilities for your business and no invented certification claims.
The right access for the job
Customer progress is private to the appropriate identity and business. Owners, authorized finance/team members and partners have different permissions. Checkout staff uses location-checked operations, not broad workspace finance access. Sensitive actions are checked on the server, not granted by a label in the browser.
Changes have an accountable record
Qualifying paid purchases, points earning/redemption, refunds and reasoned corrections keep event history. Point balances use the full ledger; test and live records stay separate. Refunds reverse originally earned points. These safeguards reduce duplicate or unauthorized records, but do not eliminate fraud or certify simultaneous-device testing.
Private passes and receipts stay private
Customer pass codes are for staff lookup, not public marketing materials. Receipt photos are kept in private storage and retrieved through authorized functions. Keep customer information and secrets out of public descriptions, emails and AI prompts unless necessary and appropriate.
Review still belongs to people
Milo’s supported actions use reviewed drafts, permission checks and explicit confirmation. Outdated or replayed reviews are refused. Saving is not owner launch, finance approval, messaging or payment. Chat and imported content cannot bypass these checks.
Your team’s responsibilities
Use assigned staff accounts, review location access and remove access when a role changes. Check qualification, eligible amount and reward terms before confirmation. Reconcile external partner payments; a payment record is not bank verification.
Honest limits and reporting
No SOC 2, ISO, HIPAA or GDPR certification, penetration-test result, guaranteed uptime or incident-free claim is made. Software and providers can fail. Report suspected account/access or privacy problems through support without sending secrets.
Online commerce attribution is inactive. Automatic partner funding/payouts are not available. Live subscription processing and app email delivery are not activated.
Heaven’s Edge
Need to report an access or privacy concern?
7 days · no card required · no automatic charge