Security & responsibilities
Useful safeguards. Clear boundaries.
Understand who can see records, who can approve changes and what your business remains responsible for.
Access follows the role
Workspace permissions distinguish owners, finance-enabled team members and other collaborators. Sensitive actions are checked server-side, not authorized by a browser label. Partners are scoped to their own membership and earnings. Use appropriate team permissions and remove access when it is no longer needed.
Checkout staff have a narrower job
Checkout staff use location-checked operations for pass lookup, reservation and paid-claim submission. They are not broad workspace finance users. A submitted receipt does not bypass authorized merchant verification or create a commission on its own.
Receipt photos are restricted
Receipt photos are kept in a private storage bucket and retrieved through authorized server functions. Upload necessary evidence, not unrelated personal information. Restricted access is a safeguard, not an absolute promise that no incident can occur.
Milo proposes; you confirm
Conversations and drafts are scoped by user, workspace and role. Proposed actions have stored payloads, revisions and review states. Explicit confirmation uses existing permissions and readiness rules, and outdated or replayed reviews are refused. Imported text, chat responses or documents are not authority to bypass approval.
Events and destinations are checked
Store notifications use signatures; server reporting uses authenticated keys. Referral redirects allow only configured destination hosts. Duplicate event/order handling reduces repeated records, but configuration, eligible amounts and source evidence still need business review. Keep secrets in the secure settings screens, never public pages or chat.
Test is not live
Test-mode sales, commissions and payouts are separated from live records. Test plan access does not allow live publication or live finance actions. Always check the environment and reviewed amount before confirming a sensitive action.
Payment duties stay distinct
Your checkout takes customer payments. Stripe handles configured platform subscription checkout. Your business pays partners externally and records actual payments. Heaven’s Edge does not hold payout funds or guarantee external transfers. Retain appropriate financial records and reconcile claims.
Reasonable safeguards, honest limits
No SOC 2, ISO, HIPAA or GDPR certification, penetration-test result or specific encryption architecture is claimed on this page. Software and service providers can fail. Report a suspected access or privacy issue through support without sending secrets, and review your own operational obligations.