Owner-review draft
This summary describes Got Mise data categories, access model, and conservative security posture without unsupported certification claims.
Got Mise may process account/profile data, restaurant and team data, prep, checklist, deep clean, service notes, handoff, temps/cooling, orders/vendor, quick cost, setup, event data, browser/session data, and support communications. Trade name: Got Mise. Final company details and business/mailing address are pending owner confirmation and legal review, and will be published before broader release.
Got Mise uses role and team membership concepts to scope access. Stable QA testing grounds validate role/location behavior, while external beta and production access require owner-approved scope and support processes.
Current practical safeguards include role-based app behavior, team membership scoping, reliability gates, secret redaction in reports, and local-only handling for sensitive Codex auth-state automation files. Current provider notes: Vercel for hosting; Supabase for authentication and database/storage; email provider not yet finalized; beta support through support@gotmise.com with provider not finalized. Analytics, crash/diagnostics, and payment/billing providers are none currently active.
Got Mise should not claim SOC 2, HIPAA, PCI, or other certifications unless independently proven and approved.
Report suspected security or data-scope issues to admin@gotmise.com. Security issues are reviewed within 1 business day and prioritized based on severity. Do not include passwords, cookies, tokens, auth storage, signing keys, or other secrets.