SECURITY

How AvenTab protects your workspace.

This page describes the safeguards built into AvenTab today. No system is perfectly secure, and we don’t claim any third-party security certification.

Operator and contact

AvenTab is operated by Fointac Media LLC aka AvenTab, located in Irving, Texas. Security concerns can be reported through our contact form.

Separate restaurant workspaces

Every read and change is checked on the server against the signed-in person’s membership. A restaurant’s web address never grants access by itself, and team members see only the restaurant they belong to.

Sign-in

Email and password accounts must verify their email address. Google and Lovable sign-in are also available.
Your session is kept in your browser’s storage so you stay signed in; signing out removes it.
Changes are accepted only from AvenTab’s own web pages, which helps block requests forged by other sites.

Roles and invitations

Owners manage settings, the subscription and the team; Staff run service. Invitation links are tied to one email address, expire after seven days and can be cancelled. Only a scrambled fingerprint of each link is stored.

Bills and payments

Totals are calculated on the server in exact cents. Each change is saved as a single step, and repeated requests are not applied twice.
Paid receipts and their kitchen tickets can’t be edited.
AvenTab doesn’t collect guest card numbers. Guests pay your restaurant through the methods you choose, and staff confirm payment.

Platform subscription

When billing is enabled, platform subscriptions are processed by Stripe. Access changes only after AvenTab verifies the subscription with Stripe — a return from a checkout page alone never unlocks a workspace.

The platform subscription has no refunds or prorated usage refunds, except where required by applicable law. Cancel before the next monthly renewal to avoid the next charge. Our terms of use contain the full cancellation policy and provide for Texas governing law.

Reporting a concern

If you think you’ve found a security problem, please tell us through the contact form. Describe what you found without including passwords or other people’s data.