Hefyt

Trust at every step

Security, taken seriously.

Hefyt was built to look after restaurants, customers, and orders throughout the journey, from account access to purchase confirmation.

  • Data protection
  • Operational monitoring
  • Sound engineering practices
View Hefyt status

Security at every layer

Protection does not rely on a single barrier.

Every operation passes through complementary controls. If a step calls for trust, it also calls for validation.

01

Protected access

Authentication, session, and identity confirmation controls help reduce unauthorized access.

02

Abuse protection

Sensitive operations limit excessive attempts and automated behavior.

03

Restaurant separation

Data and operations are handled within each establishment's own context.

04

Server-side validation

Prices, totals, permissions, and important operations never rely on the browser alone.

Your access is yours

Never share your access codes.

Hefyt will never ask for your password or authentication codes, or ask you to run commands in your browser console.

If someone impersonating Hefyt asks for this information, end the conversation and reach us through an official channel.

Use the official channel

How we protect Hefyt

Care built into the product and its operation.

Protected communication

Access to Hefyt uses HTTPS to protect information in transit.

Protected sessions

Session controls help keep each access linked to the right person.

Abuse safeguards

Sensitive actions receive limits and additional checks.

Separate contexts

Each restaurant can access only its own operation.

Signals we watch

We monitor availability and the signals needed to recognize failures.

Server-side decisions

Important rules are checked where the browser cannot alter them.

Incident response

When something does not go as expected.

Systems can fail. Alongside prevention, we maintain ways to identify failures, investigate events, and track service availability.

View Hefyt status
  1. Detect
  2. Investigate
  3. Correct
  4. Follow up

Payments

Payments on specialized infrastructure.

When online payment is available, information and the transaction are processed by the specialized provider used for that method. Hefyt does not hold the order amount.

Personal data

Security and privacy go hand in hand.

Protection also means handling data with purpose, care, and clarity. Our policy explains what information we use and why.

Learn how we handle data

Responsible reporting

Found something that does not look right?

Responsible reports of potential vulnerabilities are welcome. Our official contact form is the current route for submitting them securely.

  • Do not access other people's data.
  • Do not cause outages or disruption.
  • Provide enough information to reproduce the behavior.
  • Use the official contact channel exclusively.
Report through contact

Trust by design

Trust is not a feature. It is part of Hefyt's infrastructure.

Security is considered from the development of a feature through its everyday operation.