Pocketful

Trust center

Last updated: 2026-09-24

Overview

Restaurants and businesses trust Pocketful with their menus, sales and customer lists. This page explains how we protect that data. For how we collect and use personal data, see our privacy policy; for the rules of the service, our terms.

Infrastructure

Pocketful runs on Amazon Web Services in the United States. Production systems are separated from development, and changes are reviewed and deployed through version control.

Encryption

All traffic uses HTTPS (TLS). Passwords are hashed, and credentials such as point-of-sale API keys are encrypted at rest.

Access control

Only the people who operate the service can reach production data, using individual accounts. Each business can only see its own data.

AI and your data

When you ask Pocket a question, the relevant data and conversation are sent to our language-model provider to generate the answer. We do not sell your data or use it for advertising.

Subprocessors

Amazon Web Services (hosting, email via SES) · our language-model provider (AI answers) · Meta (WhatsApp Cloud API) · Apple (Wallet passes) · Sentry (error monitoring) · Google (email and sign-in). Each receives only what it needs to provide its part of the service.

Retention and backups

Data is kept while your account is active. Conversations and logs are kept up to 12 months for support and security; backups are kept 30 days. You can ask for your data to be exported or deleted at any time.

Monitoring and incidents

We monitor errors and unusual activity. If a security incident affects your data, we will tell affected businesses without undue delay, with what happened and what we are doing about it.

Certifications

We don't hold third-party certifications such as SOC 2 yet. If your team needs specific answers for a security review, write to us and we'll answer them.

Report a vulnerability

Found a security issue? Email hello@pocketful.ai with the details. Please give us reasonable time to fix it before disclosing it, and don't access or change other people's data while testing.