Berry OS is designed as a multi-tenant business application. Security is treated as a product requirement across authentication, workspace separation, integrations, billing and AI features.
Berry OS uses tenant-aware application logic so workspace records are associated with the appropriate customer environment. Access checks are applied before protected product actions.
Payment secrets, AI API keys and other sensitive configuration are intended to remain server-side. Production configuration should never be exposed through frontend JavaScript, HTML or public repositories.
Payment processing is handled by PayPal. Berry OS verifies relevant subscription and webhook information server-side and stores the identifiers needed to connect billing events to the correct Berry customer and workspace.
Public Berry AI does not receive private customer workspace data. Authenticated Berry AI can use permitted workspace context according to account access. High-impact actions should require explicit confirmation.
If you believe you have discovered a security issue, please email security@digitalberries.in with enough detail for us to reproduce it. Please do not attempt to access another customer's data or disrupt the service.