Berry OS is designed as a multi-tenant business application. Security is treated as a product requirement across authentication, workspace separation, integrations, billing and AI features.
Berry OS uses tenant-aware application logic so workspace records are associated with the appropriate customer environment. Access checks are applied before protected product actions.
Payment secrets, AI API keys and other sensitive configuration are intended to remain server-side. Production configuration should never be exposed through frontend JavaScript, HTML or public repositories.
Payment processing is handled through the payment method and instructions provided after approval. Berry OS records only the account and transaction information needed to operate the service and provide support.
Public Berry AI does not receive private customer workspace data. Authenticated Berry AI can use permitted workspace context according to account access. High-impact actions should require explicit confirmation.
If you believe you have discovered a security issue, please email contact@digitalberries.co.in with enough detail for us to reproduce it. Please do not attempt to access another customer's data or disrupt the service.